[Patch] Dtwitter crash if user not logged

ℹ️ Please note that the best way to get support for Real Python courses & articles is to join one of our weekly Office Hours calls or in the RP Community Slack.

You can report issues and problems here, but we typically won't be able to provide 1:1 support outside the channels listed above.

Describe the bug
If you get from part-4 the source final and load in the browser you get:

Traceback (most recent call last):
  File "/var/www/dtwitter/myvenv/lib/python3.11/site-packages/django/core/handlers/exception.py", line 47, in inner
    response = get_response(request)
               ^^^^^^^^^^^^^^^^^^^^^
  File "/var/www/dtwitter/myvenv/lib/python3.11/site-packages/django/core/handlers/base.py", line 181, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/var/www/dtwitter/dwitter/views.py", line 17, in dashboard
    user__profile__in=request.user.profile.follows.all()
                      ^^^^^^^^^^^^^^^^^^^^
  File "/var/www/dtwitter/myvenv/lib/python3.11/site-packages/django/utils/functional.py", line 247, in inner
    return func(self._wrapped, *args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: 'AnonymousUser' object has no attribute 'profile'

Fix

The first lines of the file https://github.com/realpython/materials/blob/master/dwitter-part-4/source_code_final/dwitter/views.py#L7 should be:

from django.shortcuts import render, redirect
from django.contrib.auth.decorators import login_required

from .forms import DweetForm
from .models import Dweet, Profile

@login_required(login_url='/admin/')
def dashboard(request):
    form = DweetForm(request.POST or None)

In this way automatically if the user is not logged get redirect to the admin for login, maybe there are better ways as it is just a prototype, but a prototype shouldn't crash.

打开 dwitter-part-4/source_code_final/dwitter/views.py，检查 dashboard view 中 request.user.profile 访问附近的代码。重现未经过身份验证的浏览器请求，然后验证它会重定向到管理员登录页面，而不是引发 AnonymousUser 异常。