Flask delete_tracker视图函数未返回有效响应报错排查

Flask项目开发中，访问删除追踪器接口时触发如下报错：

The view function for 'authen.delete_tracker' did not return a valid response. The function either returned None or ended without a return statement

补充说明：前端模板使用method为GET的form表单提交删除请求，指向/delete/<int:id>路由端点；如果移除delete_tracker函数中if Trackers.user_id == current_user.id:判断条件，会触发资源归属不匹配错误，提示待删除资源归属其他用户，无法完成删除操作。

后端Flask原始代码 #

@bp.route('/delete/<int:id>')
@login_required
def delete_tracker(id):
      
        if Trackers.user_id == current_user.id:
        trackers = Trackers.query.filter_by(id=id).first()
        print(trackers)
        db.session.delete(trackers)
        db.session.commit()
        return redirect(url_for("authen.dashboard"))  

前端Jinja2模板原始代码 #

{% extends "base.html" %}
{% block title %} Dashboard {% endblock %}
{% block content %}
<nav class="sidenav">
  <div class="main-buttons">
    <a class="nav-link active" id="trackers" aria-current="page" href="/dashboard">Trackers</a>
    <a class="nav-link active" id="goals" aria-current="page" href="/goals">Goals</a>
    <div>
</nav>

<div id="dashbar">
  <nav class="navbar bg-light">
    <div class="container-fluid">
      <button type="button" class="btn btn-outline-dark" data-bs-toggle="modal" data-bs-target="#exampleModal">
        Add Tracker
      </button>
      <form method="POST">
        <div class="modal fade" id="exampleModal" tabindex="-1" aria-labelledby="exampleModalLabel" aria-hidden="true">
          <div class="modal-dialog modal-dialog-centered">
            <div class="modal-content">
              <div class="modal-header">
                <h5 class="modal-title" id="exampleModalLabel">Add a Tracker</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
              </div>
              <div class="modal-body">
                <label for="tracker_name" class="col-form-label">Tracker Name:</label>
                <input type="text" class="form-control" id="tracker_name" name="tracker_name"
                  placeholder="Enter a Tracker name">
                <div class="from-fieldset" style="width:200px;">
                  <label for="tracker_type" class="form-label">Choose a Tracker type:</label>
                  <select id="tracker_type" name="tracker_type">
                    <option value="">choose Tracker type</option>
                    {% for t in data_trackers %}
                    <option value="{{t.name}}">{{t.name}}</option>
                    {% endfor %}
                    <label for="tracker_description " class="col-form-label">Description</label>
                    <input type="text" class="form-control" id="tracker_description" name="tracker_description"
                      placeholder="Enter Description">
                  </select>
                </div>
              </div>
              <div class="modal-footer">
                <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
                <button type="submit" class="btn btn-light border-dark">Submit</button>
              </div>
            </div>
          </div>
        </div>
      </form>

      <form class="d-flex" role="search">
        <input class="form-control me-2" type="search" placeholder="Search" aria-label="Search">
        <button class="btn btn-outline-success" type="submit">Search</button>
      </form>
    </div>
  </nav>
</div>

<div class="wrapper">
  <div class="container-tracker">
    {% for track in user.trackers %}
    <div class="tra">
      <h3 id="trackername"> {{track.tracker_name}}</h3>
      <div class="dropdown-container" tabindex="-1">
        <form method="GET" action="/delete/{{track.id}}">
          <button type="submit" class="btn btn-outline-light">Delete</button>
        </form>
        <div class="three-dots"></div>
        <div class="dropdown">
          <a href="#">
            <div>Records and Graphs</div>
          </a>
        </div>
      </div>
    </div>
    {% endfor %}
  </div>
</div>
{% endblock %}

• 代码缩进错误：if Trackers.user_id == current_user.id:判断下方的查询、删除、重定向逻辑没有做缩进，不属于if判断的执行块；当if条件不成立时，函数直接运行到末尾无返回值，触发无效响应报错。
• 权限判断逻辑错误：直接使用模型类Trackers的user_id字段和当前用户ID做对比，没有关联查询到的具体追踪器实例，判断逻辑完全不生效，这也是移除判断后会出现跨用户删除报错的核心原因。
• 边界场景缺失：没有处理传入ID对应追踪器不存在的场景，查询结果为None时直接执行删除会抛出异常，且异常分支没有返回合法响应。
• 接口方法不规范：删除类操作用GET请求实现，容易被爬虫、浏览器预加载等逻辑误触发，存在安全隐患。

1. 调整后端代码逻辑：先查询对应ID的追踪器，不存在直接返回404；再基于查询到的实例做归属权限校验，无权限返回403；校验通过再执行删除、提交事务、重定向。
2. 将删除接口的请求方法改为POST，同步修改前端表单的method属性，可增加删除二次确认避免误操作。

修复后的后端代码参考：

from flask import abort

@bp.route('/delete/<int:id>', methods=["POST"])
@login_required
def delete_tracker(id):
    # 查询对应ID的追踪器，不存在直接返回404
    tracker = Trackers.query.filter_by(id=id).first_or_404()
    # 校验资源归属
    if tracker.user_id != current_user.id:
        abort(403)
    # 执行删除
    db.session.delete(tracker)
    db.session.commit()
    return redirect(url_for("authen.dashboard"))

前端删除表单修改参考：

<form method="POST" action="/delete/{{track.id}}">
  <button type="submit" class="btn btn-outline-light" onclick="return confirm('确认删除该追踪器？')">Delete</button>
</form>

内容的提问来源于stack exchange，提问作者Saanidhya Yadav