adnanrahic / adnanrahic/boilerplate-api
Add projections to User model queries in UserProvider.js
Aperta
bug
help wanted
- Lingua principale
- JavaScript
- Stelle
- 22
- Fork
- 12
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
In the `UserProvider.js` every User query returns the full user object. This is a security vulnerability as we never want to return the password in the response even if it is hashed. Refactor all queries in the `UserProvider.js` not to return the password field. Refactor the tests to work cover the new user projections.
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.