Reorder

            # Determine which credentials to use

            credentials = {User: g.user, Key: g.key}.get(credential_type)

            if credentials is not None:

            if credentials is None:

                return unauthorized()

            else:

                # If g.user or g.key is set, we can trust they are valid.

                return route(**kwargs)

            else:

                return unauthorized()

        return protected_route