40 lines
1.3 KiB
Python
40 lines
1.3 KiB
Python
|
"""Contact form endpoint with rate limiting."""
|
||
|
|
|
||
|
|
from fastapi import APIRouter, Depends, HTTPException, Request, status
|
||
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
||
|
|
|
||
|
|
from app.cache import check_rate_limit
|
||
|
|
from app.database import get_db
|
||
|
|
from app.models.contact import Contact
|
||
|
|
from app.schemas.contact import ContactCreate, ContactResponse
|
||
|
|
|
||
|
|
router = APIRouter(prefix="/contact", tags=["contact"])
|
||
|
|
|
||
|
|
|
||
|
|
@router.post("", response_model=ContactResponse, status_code=status.HTTP_201_CREATED)
|
||
|
|
async def create_contact(
|
||
|
|
payload: ContactCreate,
|
||
|
|
request: Request,
|
||
|
|
db: AsyncSession = Depends(get_db),
|
||
|
|
) -> ContactResponse:
|
||
|
|
"""Submit a contact form message with rate limiting."""
|
||
|
|
client_ip = request.client.host if request.client else "unknown"
|
||
|
|
allowed = await check_rate_limit(f"contact:{client_ip}", max_requests=5, window=60)
|
||
|
|
if not allowed:
|
||
|
|
raise HTTPException(
|
||
|
|
status_code=status.HTTP_429_TOO_MANY_REQUESTS,
|
||
|
|
detail="Rate limit exceeded. Please try again later.",
|
||
|
|
)
|
||
|
|
|
||
|
|
contact = Contact(
|
||
|
|
name=payload.name,
|
||
|
|
email=str(payload.email),
|
||
|
|
phone=payload.phone,
|
||
|
|
message=payload.message,
|
||
|
|
privacy_consent=payload.privacy_consent,
|
||
|
|
)
|
||
|
|
db.add(contact)
|
||
|
|
await db.commit()
|
||
|
|
|
||
|
|
return ContactResponse(success=True, message="Kontakt-Anfrage erfolgreich gesendet.")
|