darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-06 22:48:24 -04:00
Code Issues Packages Projects Releases Wiki Activity

redirect non logged in users

Browse Source 
previously it'd show an error because non logged in users don't have the
can_use_webauthn attribute. now we can just bounce them to the sign-in
page
This commit is contained in:
Leo Hemsted
2021-08-13 18:21:52 +01:00
parent 0b27d7e0a9
commit b7e50fc638
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/main/views/user_profile.py
View File

@@ -232,6 +232,7 @@ def user_profile_disable_platform_admin_view():
@main.route("/user-profile/security-keys", methods=['GET']) @main.route("/user-profile/security-keys", methods=['GET'])
@user_is_logged_in
def user_profile_security_keys(): def user_profile_security_keys():
if not current_user.can_use_webauthn: if not current_user.can_use_webauthn:
abort(403) abort(403)
@@ -251,6 +252,7 @@ def user_profile_security_keys():
methods=['GET'], methods=['GET'],
endpoint="user_profile_confirm_delete_security_key" endpoint="user_profile_confirm_delete_security_key"
) )
@user_is_logged_in
def user_profile_manage_security_key(key_id): def user_profile_manage_security_key(key_id):
if not current_user.can_use_webauthn: if not current_user.can_use_webauthn:
abort(403) abort(403)
@@ -282,6 +284,7 @@ def user_profile_manage_security_key(key_id):
@main.route("/user-profile/security-keys/<uuid:key_id>/delete", methods=['POST']) @main.route("/user-profile/security-keys/<uuid:key_id>/delete", methods=['POST'])
@user_is_logged_in
def user_profile_delete_security_key(key_id): def user_profile_delete_security_key(key_id):
if not current_user.can_use_webauthn: if not current_user.can_use_webauthn:
abort(403) abort(403)