login user object shouldn't contain password hash

competemcgill / wisp-users-microservice

WISP Microservice to handle user data and interactions

MIT License

4 stars 1 forks source link

Closed MohamedBeydoun closed 4 years ago

MohamedBeydoun commented 4 years ago

currently, the /auth/login route returns the full user (including the password has). Password should be removed before sending response.

MohamedBeydoun commented 4 years ago

78989115664112ec7d7cce9369c8d21b5a9274a1