fastapi-rate-limiting-integration

What problem does it solve? Rate limiting in FastAPI with slowapi often fails silently when the request: Request parameter is missing from endpoint signatures, leaving APIs unprotected without any obvious error. This Skill provides the correct patterns, common pitfalls, and review checklists to ensure rate limits are actually enforced. ## Core Features & Use Cases - Correct Decorator Signatures: Enforces the mandatory request: Request parameter on all rate-limited endpoints so slowapi can extract the request for key generation. - Custom Whitelist Limiter: Shows how to subclass slowapi.Limiter and override _check_request_limit to bypass limits for trusted API keys using hmac.compare_digest. - Error Diagnosis Table: Maps common symptoms (limits not enforced, missing imports, broken whitelist bypass) to their root causes and fixes. - Use Case: When adding @limiter.limit() to a chat endpoint, apply this Skill to verify the signature includes request: Request, the import is present, and rate limiting is tested with both authenticated and unauthenticated requests. ## Quick Start Review my FastAPI endpoint that uses slowapi rate limiting and verify the decorator signature and whitelist logic are correct.