adnanrahic / adnanrahic/boilerplate-api
Add projections to User model queries in UserProvider.js
Ouverte
bug
help wanted
- Langage dominant
- JavaScript
- Étoiles
- 22
- Forks
- 12
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
In the `UserProvider.js` every User query returns the full user object. This is a security vulnerability as we never want to return the password in the response even if it is hashed. Refactor all queries in the `UserProvider.js` not to return the password field. Refactor the tests to work cover the new user projections.
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.