GraphQL schema exposes customer data

chrisvdm / redwoodjs-stripe

A Redwood/Stripe integration made easy

MIT License

46 stars 7 forks source link

GraphQL schema exposes customer data #94

Closed Benjamin-Lee closed 1 year ago

Benjamin-Lee commented 1 year ago

Nothing critical seems to be exposed but perhaps this should be locked down. There are lots of use cases where you don't want to leak the emails of purchasers.

chrisvdm commented 1 year ago

@Benjamin-Lee Thank you for catching this 🚀

Had a few rogue skipAuth directives from early development days to make testing easier :)