Don't give back the stored password hash !

fasterthanlime · Nov 7, 2011 · e8faf94 · nddrylliog · Nov 7, 2011 · romac
1 parent 7add39d
commit e8faf94
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/server.coffee b/backend/server.coffee
@@ -107,7 +107,7 @@ app.post '/login', (req, res) ->
       if sha1(req.body.password) == user.sha1
         res.send { result: 'success', session_token: generateToken(user.username), user: user }
       else
-        res.send { result: 'failure', provided: sha1(req.body.password), stored: user.sha1 }
+        res.send { result: 'failure', provided: sha1(req.body.password) }
 
 app.get '/user/:username', requiresToken (req, res) ->
   User.findOne { username: req.params.username }, (err, user) ->