diff options
| -rw-r--r-- | famille.py | 14 |
1 files changed, 10 insertions, 4 deletions
@@ -1,16 +1,18 @@ import sqlite3 #all the imports -from flask import Flask, request, session, g, redirect,\ +from flask import abort, Flask, request, session, g, redirect,\ url_for, render_template, jsonify from functools import wraps from pytz import timezone -import pytz from docutils import core from datetime import datetime -import time from email import utils from bs4 import BeautifulSoup import locale +import logging +import pytz +import time + from smartypants import smartypants, Attr from email_helpers import GmailMessage @@ -106,8 +108,12 @@ def login_required(f): @wraps(f) def decorated_function(*args, **kwargs): if 'user_name' not in session: + remote_user = request.headers.get("X-Remote-User") + if remote_user is None: + logging.error("missing header X-Remote-User") + return abort(401) user = query_db('select * from users where id = ?', - (request.headers["X-Remote-User"],), True) + (remote_user,), True) session['user_name'] = user['user_name'] session['user_id'] = user['id'] session['timezone'] = user['timezone'] or "UTC" |