问获取cursor.close()视图:调用/api/UnboundLocalError/addmin时，在赋值错误之前引用了局部变量“”cursor“”

EN

    import pymysql
    from functools import  wraps
    import jwt
    import uuid
    import  datetime
    from werkzeug.security import generate_password_hash, check_password_hash
    from app import app
    from config import mysql
    from flask import jsonify
    from flask import flash, request
    app.config['SECRET_KEY']='confidential'
    
    def token_required(f):
        @wraps(f)
        def decorated(*args,**kwargs):
            token= None
            if 'x-acess-token' in request.headers:
                token=request.headers['x-acess-token']
            if not  token:
                return  jsonify("token not found")
            try:
                data=jwt.decode(token,app.config['SECRET_KEY'])
                conn=mysql.connect()
                cursor=conn.cursor(pymysql.cursors.DictCursor)
                cursor.execute('select  * from hireme_emp  where id=%s',data['id'])
                current_user=cursor.fetchone()
            except:
                return jsonify('invalid token')
            finally:
                cursor.close()
                conn.close()
            return  f(current_user,*args,**kwargs)
        return decorated

#-----------------------------------------------

    app.route('/api/view/addmin')
    @token_required
    def view_addmin(current_user):
        try:
            conn=mysql.connect()
            cursor=conn.cursor(pymysql.cursors.DictCursor)
            cursor.execute("SELECT * FROM hireme_emp WHERE admin=1")
            rows=cursor.fetchall()
            resp=jsonify(rows)
            resp.status_code=200
            return  resp
        except Exception as e:
            print(e)
        finally:
            cursor.close()
            conn.close()

ERROR :line 30, in decorated
    cursor.close()
UnboundLocalError: local variable 'cursor' referenced before assignment
127.0.0.1 - - [23/Jul/2021 01:08:53] "GET /api/view/addmin HTTP/1.1" 500 -. 

def token_required(f):
    @wraps(f)
    def decorated(*args, **kwargs):
        token = None

        if 'x-access-token' in request.headers:
            token = request.headers['x-access-token']

        if not token:
            return jsonify({'message' : 'Token is missing!'}), 401

        try: 
            data = jwt.decode(token, app.config['SECRET_KEY'])
            current_user = User.query.filter_by(public_id=data['public_id']).first()
        except:
            return jsonify({'message' : 'Token is invalid!'}), 401

        return f(current_user, *args, **kwargs)

    return decorated