failing-revenge-route

routes.py

@bp.route("/<school_name>/course/<course_id>")
@valid_school
def grades(school_name, course_id):
    grades = _api(f'/course/{course_id}')
    if grades == {}:
        return render_template("error.html", message="Course not found")
    return render_template("grades.html", school_name=school_name,
                           grades=grades['grades'],
                           course_name=grades['course_name'])