From c06f26cabb4626a18a9db70fd8e1ada0eefbc5f7 Mon Sep 17 00:00:00 2001 From: -LAN- Date: Tue, 20 May 2025 17:58:28 +0800 Subject: [PATCH] feat: Enhances token validation in user login Signed-off-by: -LAN- --- api/extensions/ext_login.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/api/extensions/ext_login.py b/api/extensions/ext_login.py index 687ac6355d..757c6b44eb 100644 --- a/api/extensions/ext_login.py +++ b/api/extensions/ext_login.py @@ -37,6 +37,8 @@ def load_user_from_request(request_from_flask_login): raise Unauthorized("Invalid Authorization token.") decoded = PassportService().verify(auth_token) user_id = decoded.get("user_id") + if not user_id: + raise Unauthorized("Invalid Authorization token.") logged_in_account = AccountService.load_logged_in_account(account_id=user_id) return logged_in_account