Check if token is empty or invalid, update postman

webservice/api_blueprint_transactions.py

@@ -4,7 +4,7 @@ import datetime
 from flask import Blueprint, jsonify, request
 
 from db import db
-from helper_functions import get_username_from_token_data, extract_token_data, get_token, get_user_id_from_username
+from helper_functions import get_username_from_token_data, extract_token_data, get_token, get_user_id_from_username, return_401
 from models import Transaction
 
 transaction_blueprint = Blueprint('transaction', __name__, url_prefix='/api')
@@ -13,15 +13,17 @@ __location__ = os.path.realpath(os.path.join(os.getcwd(), os.path.dirname(__file
 
 @transaction_blueprint.route('/transaction', methods=['POST'])
 def add_transaction():
+    # get username from jwt token
+    username = get_username_from_token_data(extract_token_data(get_token()))
+    if username is None:  # If token not provided or invalid -> return 401 code
+        return return_401()
+
     request_data = request.get_json()
     symbol = request_data['symbol']
     time = datetime.datetime.strptime(request_data['time'], '%Y-%m-%dT%H:%M:%S.%fZ')
     count = request_data['count']
     price = request_data['price']
 
-    # get username from jwt token
-    username = get_username_from_token_data(extract_token_data(get_token()))
-
     new_transcation = Transaction(
         user_id=get_user_id_from_username(username),
         symbol=symbol,
@@ -39,6 +41,8 @@ def add_transaction():
 def get_transaction():
     # get username from jwt token
     username = get_username_from_token_data(extract_token_data(get_token()))
+    if username is None:  # If token not provided or invalid -> return 401 code
+        return return_401()
 
     return_transactions = []
     transactions = db.session.query(Transaction).filter_by(user_id=get_user_id_from_username(username)).all()