Host sends too much data about user to sandbox

teleclimber / Dropserver

An application platform for your personal web services. https://dropserver.org

Apache License 2.0

45 stars 1 forks source link

Host sends too much data about user to sandbox #69

Closed teleclimber closed 2 years ago

teleclimber commented 2 years ago

Right now it looks like we're just pulling user data from the db on host and sending it as-is to sandbox. Not good because we don't want to reveal everything about user, in particular auth method and auth id.