log invalid api requests

pandora/oxdjango/api/views.py

@@ -34,6 +34,13 @@ def api(request):
         return response
     if request.META.get('CONTENT_TYPE') == 'application/json':
         r = json.loads(request.body.decode('utf-8'))
+        if 'action' not in r:
+            logger.error("invalid api request: %s", r)
+            response = render_to_json_response(json_response(status=400,
+                                               text='Invalid request'))
+            response['Access-Control-Allow-Origin'] = '*'
+            return response
+        else:
             action = r['action']
             data = r.get('data', {})
     else: