fix

account/views/oj.py

@@ -78,8 +78,8 @@ class UserProfileAPI(AsyncAPIView):
         profile = await UserProfile.objects.select_related("user").aget(user=user)
         return self.success(UserProfileSerializer(profile, show_real_name=show_real_name).data)
 
-    @validate_serializer(EditUserProfileSerializer)
     @login_required
+    @validate_serializer(EditUserProfileSerializer)
     async def put(self, request):
         data = request.data
         user_profile = await UserProfile.objects.select_related("user").aget(user=request.user)

comment/views/oj.py

@@ -13,8 +13,8 @@ from utils.constants import CacheKey
 
 
 class CommentAPI(AsyncAPIView):
-    @validate_serializer(CreateCommentSerializer)
     @login_required
+    @validate_serializer(CreateCommentSerializer)
     async def post(self, request):
         data = request.data
         try:

contest/views/oj.py

@@ -79,8 +79,8 @@ class ContestListAPI(AsyncAPIView):
 
 
 class ContestPasswordVerifyAPI(AsyncAPIView):
-    @validate_serializer(ContestPasswordVerifySerializer)
     @login_required
+    @validate_serializer(ContestPasswordVerifySerializer)
     async def post(self, request):
         data = request.data
         try:

message/views/oj.py

@@ -15,8 +15,8 @@ class MessageAPI(AsyncAPIView):
         ).filter(recipient=request.user)
         return self.success(await self.async_paginate_data(request, messages, MessageSerializer))
 
-    @validate_serializer(CreateMessageSerializer)
     @super_admin_required
+    @validate_serializer(CreateMessageSerializer)
     async def post(self, request):
         data = request.data
         if data["recipient"] == request.user.id:

submission/views/oj.py

@@ -52,8 +52,8 @@ class SubmissionAPI(AsyncAPIView):
                 ):
                     return self.error("Your IP is not allowed in this contest")
 
-    @validate_serializer(CreateSubmissionSerializer)
     @login_required
+    @validate_serializer(CreateSubmissionSerializer)
     async def post(self, request):
         data = request.data
         hide_id = False
@@ -122,8 +122,8 @@ class SubmissionAPI(AsyncAPIView):
         )
         return self.success(submission_data)
 
-    @validate_serializer(ShareSubmissionSerializer)
     @login_required
+    @validate_serializer(ShareSubmissionSerializer)
     async def put(self, request):
         try:
             submission = await Submission.objects.select_related("problem", "contest").aget(