fix: hide sensitive email change fields in team member responses

This commit is contained in:
Yihang Wang 2025-09-18 00:40:09 +08:00
parent 9d1369e7f8
commit 844a67a006
No known key found for this signature in database
GPG key ID: C8A9AC8D3F4845A2

View file

@ -179,6 +179,8 @@ public function members_by_id(Request $request)
$members = $team->members;
$members->makeHidden([
'pivot',
'email_change_code',
'email_change_code_expires_at',
]);
return response()->json(
@ -264,6 +266,8 @@ public function current_team_members(Request $request)
$team = auth()->user()->currentTeam();
$team->members->makeHidden([
'pivot',
'email_change_code',
'email_change_code_expires_at',
]);
return response()->json(