From 4787d854b836ed30003a9fafa8e3a89057e1b9ac Mon Sep 17 00:00:00 2001
From: Mouse Reeve <mousereeve@riseup.net>
Date: Sun, 3 Oct 2021 09:19:19 -0700
Subject: [PATCH] require auth on resolve book endpoint

---
 bookwyrm/views/books/books.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bookwyrm/views/books/books.py b/bookwyrm/views/books/books.py
index 9de647a24..298ba5a30 100644
--- a/bookwyrm/views/books/books.py
+++ b/bookwyrm/views/books/books.py
@@ -172,6 +172,7 @@ def add_description(request, book_id):
     return redirect("book", book.id)
 
 
+@login_required
 @require_POST
 def resolve_book(request):
     """figure out the local path to a book from a remote_id"""