diff --git a/pinjam_buku/views.py b/pinjam_buku/views.py
index 4afdd05..cc83700 100644
--- a/pinjam_buku/views.py
+++ b/pinjam_buku/views.py
@@ -66,6 +66,7 @@ def return_book_ajax(request, id):
             book.delete()
     return HttpResponse(b"RETURNED", status=201)
 
+@login_required(login_url='/login')
 @csrf_exempt
 def borrow_book_flutter(request, id):
     if request.method == 'POST':