move max datetime limit to ApiSettings

tests/test_app.py

@@ -454,3 +454,18 @@ def test_unbounded_start(app, xarray_query_params) -> None:
     )
 
     assert response.status_code == 400
+
+
+def test_max_datetime(app, xarray_query_params) -> None:
+    """Make sure a request that yields too many sub-requests returns a 400"""
+
+    response = app.get(
+        "/timeseries",
+        params={
+            **xarray_query_params,
+            "datetime": "2008-10-12T00:00:01Z/2024-10-12T23:59:59Z",
+            "step": "P1D",
+        },
+    )
+
+    assert response.status_code == 400

titiler/cmr/settings.py

@@ -14,6 +14,7 @@ class ApiSettings(BaseSettings):
     cors_origins: str = "*"
     cachecontrol: str = "public, max-age=3600"
     root_path: str = ""
+    time_series_max_requests: int = 995
     debug: bool = False
 
     model_config = {

titiler/cmr/timeseries.py

@@ -41,6 +41,7 @@
 from titiler.cmr.dependencies import ConceptID
 from titiler.cmr.errors import InvalidDatetime
 from titiler.cmr.factory import Endpoints
+from titiler.cmr.settings import ApiSettings
 from titiler.cmr.utils import parse_datetime
 from titiler.core.algorithm import algorithms as available_algorithms
 from titiler.core.dependencies import CoordCRSParams, DefaultDependency, DstCRSParams
@@ -50,6 +51,8 @@
 from titiler.core.resources.enums import ImageType
 from titiler.core.resources.responses import GeoJSONResponse
 
+settings = ApiSettings()
+
 # this section should eventually get moved to titiler.extensions.timeseries
 timeseries_img_endpoint_params: Dict[str, Any] = {
     "responses": {
@@ -342,6 +345,13 @@ def timeseries_cmr_query(
                 "list of comma-separated datetime strings",
             )
 
+    if len(datetime_params) > settings.time_series_max_requests:
+        raise HTTPException(
+            status_code=400,
+            detail=f"this request ({len(datetime_params)}) exceeds the maximum number of distinct "
+            f"time series points/intervals of {settings.time_series_max_requests}",
+        )
+
     return [
         CMRQueryParameters(
             concept_id=concept_id,