fix toggle contact should only be used by authenticated user

2021-12-06 18:39:12 +01:00 · 2021-12-06 18:39:12 +01:00 · a021bba811
parent 40299cbf34
commit a021bba811
1 changed files with 1 additions and 0 deletions
--- a/app/dashboard/views/index.py
+++ b/app/dashboard/views/index.py
@ -203,6 +203,7 @@ def index():


@dashboard_bp.route("/contacts/<int:contact_id>/toggle", methods=["POST"])
+@login_required
 def toggle_contact(contact_id):
    """
    Block/Unblock contact