From 40b4d95cf34472c7061537b52ee8fa902672bdd1 Mon Sep 17 00:00:00 2001
From: moshyfawn <email@moshyfawn.dev>
Date: Mon, 12 Jan 2026 01:07:40 -0500
Subject: [PATCH] appview/notifications: secure count method

---
 appview/notifications/notifications.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/appview/notifications/notifications.go b/appview/notifications/notifications.go
index b4b643ab..5534c777 100644
--- a/appview/notifications/notifications.go
+++ b/appview/notifications/notifications.go
@@ -92,6 +92,7 @@ func (n *Notifications) notificationsPage(w http.ResponseWriter, r *http.Request
 func (n *Notifications) getUnreadCount(w http.ResponseWriter, r *http.Request) {
 	user := n.oauth.GetUser(r)
 	if user == nil {
+		http.Error(w, "Forbidden", http.StatusUnauthorized)
 		return
 	}
 
-- 
2.43.0