Skip to content

User Passwords in response #12

@Alkandari-Y

Description

@Alkandari-Y

You currently have an exposed endpoint returning all user info including hashed passwords which poses a security risk.

I know that this is a learning project, but I have to alert you that this kind of looseness with data exposure poses a risk to users and to you.

Always be alert and on guard when dealing with user data.

Use the select method to ignore the passwords. Use MongoDbCompass to inspect passwords are being saved and hashed properly.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions