Search code examples
djangodjango-authentication

'AnonymousUser' object is not iterable

if not request.user.is_authenticated:
    return None

try:
    return ClientProfile.objects.get(user=request.user)
except ClientProfile.DoesNotExist:
    return None

This code should return None, if I'm not logged in and trying to call it. But as I see from stacktrace, it crashes with error "'AnonymousUser' object is not iterable" on this line:

return ClientProfile.objects.get(user=request.user)

I'm browsing the following page in private mode, so I'm 100% not authenticated.

How to fix this issue?

Solution

  • In Django 1.9 and earlier, is_authenticated() is a method, you must call it.

    if not request.user.is_authenticated():
    ...

    It's an easy mistake to forget to call the method. In your case it's causing an error, but in other cases it might allow users to have access to data that they shouldn't. From Django 1.10, is_authenticated is changing to a property to prevent this.