From 7862ec2765d8b843394630e0a529bd98421619e8 Mon Sep 17 00:00:00 2001 From: Gwendolyn Date: Tue, 5 Dec 2023 15:36:58 +0100 Subject: [PATCH] raise APIKeyInvalid if no api key is provided --- src/c3nav/api/auth.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/c3nav/api/auth.py b/src/c3nav/api/auth.py index d446d102..e70563ca 100644 --- a/src/c3nav/api/auth.py +++ b/src/c3nav/api/auth.py @@ -59,6 +59,9 @@ class APIKeyAuth(APIKeyHeader): request.user_permissions = SimpleLazyObject(lambda: UserPermissionsMiddleware.get_user_permissions(request)) request.user_space_accesses = lazy(UserPermissionsMiddleware.get_user_space_accesses, dict)(request) + if key is None: + raise APIKeyInvalid + if key == "anonymous": return APIAuthDetails( key_type=APIKeyType.ANONYMOUS,