Filter sensitive user data from login endpoint response (Issue #698)#703
Filter sensitive user data from login endpoint response (Issue #698)#703anshul23102 wants to merge 1 commit into
Conversation
…ricsLab#698) Exclude password hash from the user object returned in login endpoint response. This prevents credential leaks where sensitive password hashes could be extracted and potentially subjected to offline attacks. Changes: - Extract user object and remove password field before returning - Ensure login response contains only non-sensitive user properties - Prevents password hash exposure in JSON responses Fixes GitMetricsLab#698
|
Warning Review limit reached
More reviews will be available in 59 minutes and 49 seconds. Learn how PR review limits work. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
✅ Deploy Preview for github-spy ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
Could the maintainers please add relevant labels to this PR? Suggested labels:
This would help with issue tracking and organization. Thank you! |
1 participant
Summary
Exclude password hash from the user object returned in login endpoint response. This prevents credential leaks where sensitive password hashes could be extracted and potentially subjected to offline attacks.
Changes
Testing
Type of Change
Contributor Declaration
This contribution is original work and I have the right to contribute this code to the project. I understand that the project is licensed under its respective license and my contributions will be available under the same license terms.
Closes #698