From 7ff5fc84af80a9f844a32549b0e5a932a5c0a1c8 Mon Sep 17 00:00:00 2001
From: Laurent Erignoux <lerignoux@gmail.com>
Date: Sun, 30 Mar 2025 10:13:13 +0800
Subject: [PATCH] Ensuring a 401 error is returned when user data is not found
 in multi-user context.

---
 app/app_settings.py | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/app/app_settings.py b/app/app_settings.py
index a545df92e..38ce2fd10 100644
--- a/app/app_settings.py
+++ b/app/app_settings.py
@@ -9,8 +9,14 @@ class AppSettings():
         self.user_manager = user_manager
 
     def get_settings(self, request):
-        file = self.user_manager.get_request_user_filepath(
-            request, "comfy.settings.json")
+        try:
+            file = self.user_manager.get_request_user_filepath(
+                request,
+                "comfy.settings.json"
+            )
+        except KeyError as e:
+            log.error(f"User settings not found.")
+            raise aiohttp.web.HTTPUnauthorized('User not found') from e
         if os.path.isfile(file):
             try:
                 with open(file) as f:
@@ -30,7 +36,9 @@ class AppSettings():
     def add_routes(self, routes):
         @routes.get("/settings")
         async def get_settings(request):
-            return web.json_response(self.get_settings(request))
+
+                return web.json_response(self.get_settings(request))
+
 
         @routes.get("/settings/{id}")
         async def get_setting(request):