From 9caad56ffcfc1d900163df1b3f50b4d5e0081bdc Mon Sep 17 00:00:00 2001
From: Mouse Reeve <mousereeve@riseup.net>
Date: Fri, 30 Apr 2021 20:08:05 -0700
Subject: [PATCH] Don't allow remote search results for logged out users

---
 bookwyrm/views/search.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bookwyrm/views/search.py b/bookwyrm/views/search.py
index 9fa07e2e..c216170d 100644
--- a/bookwyrm/views/search.py
+++ b/bookwyrm/views/search.py
@@ -23,7 +23,9 @@ class Search(View):
         query = request.GET.get("q")
         min_confidence = request.GET.get("min_confidence", 0.1)
         search_type = request.GET.get("type")
-        search_remote = request.GET.get("remote", False)
+        search_remote = (
+            request.GET.get("remote", False) and request.user.is_authenticated
+        )
 
         if is_api_request(request):
             # only return local book results via json so we don't cascade