Fixing 'me' password leak

meanjs · Nov 22, 2013 · ca0d6a9 · ca0d6a9
1 parent 5505b3a
commit ca0d6a9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/passport.js b/config/passport.js
@@ -17,7 +17,7 @@ module.exports = function(passport) {
     passport.deserializeUser(function(id, done) {
         User.findOne({
             _id: id
-        }, function(err, user) {
+        }, '-salt -hashed_password', function(err, user) {
             done(err, user);
         });
     });