if not request.user.is_authenticated:
return None
try:
return ClientProfile.objects.get(user=request.user)
except ClientProfile.DoesNotExist:
return None
This code should return None, if I'm not logged in and trying to call it. But as I see from stacktrace, it crashes with error "'AnonymousUser' object is not iterable" on this line:
return ClientProfile.objects.get(user=request.user)
I'm browsing the following page in private mode, so I'm 100% not authenticated.
How to fix this issue?
In Django 1.9 and earlier, is_authenticated()
is a method, you must call it.
if not request.user.is_authenticated():
...
It's an easy mistake to forget to call the method. In your case it's causing an error, but in other cases it might allow users to have access to data that they shouldn't. From Django 1.10, is_authenticated
is changing to a property to prevent this.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With