fix: more secure check when getting user identity

crs4 · Jan 9, 2024 · 3c89e70 · 3c89e70
1 parent 40c03a0
commit 3c89e70
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lifemonitor/auth/controllers.py b/lifemonitor/auth/controllers.py
@@ -197,7 +197,8 @@ def profile(form=None, passwordForm=None, currentView=None,
     logger.debug("Current user: %r", current_user)
     user_identities = [{
         "name": p.name,
-        "identity": current_user.oauth_identity.get(p.name, None),
+        "identity": current_user.oauth_identity.get(p.name, None)
+        if current_user and current_user.is_authenticated else None,
         "provider": p
     } for p in OAuth2IdentityProvider.all()
     ]