From 22036771463c65d21dac680494ce29eb3e2edb9f Mon Sep 17 00:00:00 2001 From: Edward Betts Date: Wed, 16 Jul 2025 12:12:47 +0200 Subject: [PATCH] Trip debug page needs user to be authenticated. --- web_view.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/web_view.py b/web_view.py index c670732..0f137b8 100755 --- a/web_view.py +++ b/web_view.py @@ -592,6 +592,10 @@ def trip_page(start: str) -> str: @app.route("/trip//debug") def trip_debug_page(start: str) -> str: """Trip debug page showing raw trip object data.""" + + if not flask.g.user.is_authenticated: + flask.abort(401) + route_distances = agenda.travel.load_route_distances(app.config["DATA_DIR"]) trip_list = get_trip_list(route_distances)