Trip debug page needs user to be authenticated.

2025-07-16 12:12:47 +02:00 · 2025-07-16 12:12:47 +02:00 · 2203677146
parent 46091779f0
commit 2203677146
1 changed files with 4 additions and 0 deletions
--- a/web_view.py
+++ b/web_view.py
@ -592,6 +592,10 @@ def trip_page(start: str) -> str:
@app.route("/trip/<start>/debug")
 def trip_debug_page(start: str) -> str:
    """Trip debug page showing raw trip object data."""
+
+    if not flask.g.user.is_authenticated:
+        flask.abort(401)
+
    route_distances = agenda.travel.load_route_distances(app.config["DATA_DIR"])
    trip_list = get_trip_list(route_distances)