From bca8978ffd44093bc4e7c790d8ee064d2f2b492a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Krassowski?=
 <5832902+krassowski@users.noreply.github.com>
Date: Mon, 22 Jul 2024 17:39:55 +0100
Subject: [PATCH] Add `@web.authenticated` for `ListingsHandler`'s `GET` method
 (#457)

* Add `@web.authenticated` for `ListingsHandler`'s `GET` method

* Fix name
---
 jupyterlab_server/listings_handler.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/jupyterlab_server/listings_handler.py b/jupyterlab_server/listings_handler.py
index b9e5973..bf310c7 100644
--- a/jupyterlab_server/listings_handler.py
+++ b/jupyterlab_server/listings_handler.py
@@ -82,6 +82,7 @@ class ListingsHandler(APIHandler):
     # The PeriodicCallback that schedule the call to fetch_listings method.
     pc = None
 
+    @tornado.web.authenticated
     def get(self, path: str) -> None:
         """Get the listings for the extension manager."""
         self.set_header("Content-Type", "application/json")