Merge pull request #196 from Progress1/dont_show_psw

Don't show/send user password field to backend (report items..)
SK-CERT · Nov 29, 2023 · b915724 · b915724
2 parents 490af27 + c670934
commit b915724
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/shared/shared/schema/apikey.py b/src/shared/shared/schema/apikey.py
@@ -17,7 +17,7 @@ class Meta:
 
 
 class ApiKeySchema(ApiKeyBaseSchema):
-    user = fields.Nested(UserSchemaBase)
+    user = fields.Nested(UserSchemaBase, exclude=("password",))
 
     @post_load
     def make(self, data, **kwargs):

diff --git a/src/shared/shared/schema/report_item.py b/src/shared/shared/schema/report_item.py
@@ -24,7 +24,7 @@ class ReportItemAttributeSchema(ReportItemAttributeBaseSchema):
     last_updated = fields.DateTime("%d.%m.%Y - %H:%M")
     version = fields.Int()
     current = fields.Bool()
-    user = fields.Nested(UserSchemaBase)
+    user = fields.Nested(UserSchemaBase, exclude=("password",))
 
     @post_load
     def make(self, data, **kwargs):