1 files changed, 10 insertions, 4 deletions
diff --git a/famille.py b/famille.py
index c2b420a..bf26e52 100644
--- a/famille.py
+++ b/famille.py
@@ -1,16 +1,18 @@
 import sqlite3
 #all the imports
-from flask import Flask, request, session, g, redirect,\
+from flask import abort, Flask, request, session, g, redirect,\
     url_for, render_template, jsonify
 from functools import wraps
 from pytz import timezone
-import pytz
 from docutils import core
 from datetime import datetime
-import time
 from email import utils
 from bs4 import BeautifulSoup
 import locale
+import logging
+import pytz
+import time
+
 from smartypants import smartypants, Attr
 from email_helpers import GmailMessage
 
@@ -106,8 +108,12 @@ def login_required(f):
     @wraps(f)
     def decorated_function(*args, **kwargs):
         if 'user_name' not in session:
+            remote_user = request.headers.get("X-Remote-User")
+            if remote_user is None:
+                logging.error("missing header X-Remote-User")
+                return abort(401)
             user = query_db('select * from users where id = ?',
-                            (request.headers["X-Remote-User"],), True)
+                            (remote_user,), True)
             session['user_name'] = user['user_name']
             session['user_id'] = user['id']
             session['timezone'] = user['timezone'] or "UTC"