Merge pull request #153 from ZeusWPI/dont-send-emailaddress

Don't send email address in /current_user endpoint
ZeusWPI · Oct 3, 2021 · e6f3d73 · e6f3d73
2 parents 9411677 + 181e12f
commit e6f3d73
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/models/user.rs b/src/models/user.rs
@@ -81,6 +81,9 @@ pub struct User {
 	#[validate(length(min = 3, max = 254))]
 	pub full_name:             String,
 	#[validate(email)]
+	#[serde(skip)]
+	// Don't send backing email address of users, applications could
+	// accidentally use this
 	pub email:                 String,
 	#[serde(skip)]
 	pub pending_email:         Option<String>,