chg: [internal] Do not fetch authkey from db

2021-09-16 10:43:57 +02:00 · 2021-09-16 10:43:57 +02:00 · bc3bbfdf75
parent 44fbf45ce5
commit bc3bbfdf75
1 changed files with 2 additions and 0 deletions
--- a/app/Model/User.php
+++ b/app/Model/User.php
@ -913,6 +913,8 @@ class User extends AppModel
        unset($fields['certif_public']);
        // Do not fetch password from db, it is automatically fetched by BaseAuthenticate::_findUser
        unset($fields['password']);
+        // Do not fetch authkey from db, it is sensitive and not need
+        unset($fields['authkey']);
        $fields = array_keys($fields);

        foreach ($this->belongsTo as $relatedModel => $foo) {