diff --git a/ahserver/auth_api.py b/ahserver/auth_api.py index 77408a6..71cfc0b 100755 --- a/ahserver/auth_api.py +++ b/ahserver/auth_api.py @@ -60,6 +60,8 @@ class AuthAPI(AppLogger): print(f'**{user=}, {path} access **') return await handler(request) print(f'**{user=}, {path} forbidden**') + if user is None: + raise web.HTTPUnauthorized raise web.HTTPForbidden() async def checkUserPermission(self, user, path):