🔒 Do not expose application api into (#372)

2024-02-26 16:55:27 +01:00
parent e0aca9dcd5
commit 62845798b9
3 changed files with 5 additions and 9 deletions
@@ -23,6 +23,8 @@ export class CompanyApplicationServiceImpl implements TdriveServiceProvider, Ini
        pk.application_id,
        context,
      );
+      //do not expose application secret
+      application.api = null;

      if (!application?.id) {
        return null;
@@ -62,6 +64,8 @@ export class CompanyApplicationServiceImpl implements TdriveServiceProvider, Ini
        companyApplication.application_id,
        context,
      );
+      //do not expose application secret
+      application.api = null;
      if (application)
        applications.push({
          ...companyApplication,