FastAPI でリクエストの不正防止とセキュリティを実装する方法

from fastapi import FastAPI, Header, HTTPException, Depends, Response
from pydantic import BaseModel
from typing import Optional

class Request(BaseModel):
    user_agent: Optional[str] = None
    ip_address: Optional[str] = None

class ResponseModel(BaseModel):
    result: str

async def check_fraud(request: Request, api_key: str = Header(...)) -> Response:
    # 检查用户代理
    if request.user_agent and 'bot' in request.user_agent:
        raise HTTPException(
            status_code=403,
            detail='Bot Detected'
        )

    # 检查IP地址
    if request.ip_address and request.ip_address in blacklist:
        raise HTTPException(
            status_code=403,
            detail='IP Address Blocked'
        )

    # 其他检查逻辑...

    # 返回结果
    return ResponseModel(result='Success')

app = FastAPI()

@app.post('/api/verify', status_code=200)
async def verify(request: Request, response: Response = Depends(check_fraud)):
    return response

if __name__ == '__main__':
    import uvicorn

    uvicorn.run(app, host='0.0.0.0', port=8000)