Ensure user logged in before POSTing

Sabreen-Parveen · Feb 5, 2021 · 7eab0c7 · 7eab0c7
1 parent ec872bc
commit 7eab0c7
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/openlibrary/plugins/openlibrary/api.py b/openlibrary/plugins/openlibrary/api.py
@@ -382,9 +382,11 @@ class observations(delegate.page):
 
     def POST(self):
         user = accounts.get_current_user()
-        account = OpenLibraryAccount.get_by_email(user.email)
-        s3_keys = web.ctx.site.store.get(account._key).get('s3_keys')
 
-        response = post_observation(web.data(), s3_keys)
+        if user:
+            account = OpenLibraryAccount.get_by_email(user.email)
+            s3_keys = web.ctx.site.store.get(account._key).get('s3_keys')
 
-        return delegate.RawText(response)
+            if s3_keys:
+                response = post_observation(web.data(), s3_keys)
+                return delegate.RawText(response)