From de1bd615fa8908e4ab2afa8900162b2ca70311eb Mon Sep 17 00:00:00 2001 From: Adrian Obelmejias Date: Thu, 11 Feb 2016 16:31:58 -0500 Subject: [PATCH] Remove password from deserializeUser method of passport --- config/passport.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/passport.js b/config/passport.js index cd446ca..525c7fe 100644 --- a/config/passport.js +++ b/config/passport.js @@ -8,7 +8,7 @@ passport.serializeUser((user, done) => { passport.deserializeUser(async (id, done) => { try { - const user = await User.findById(id) + const user = await User.findById(id, '-password') done(null, user) } catch(err) { done(err)