fix: hide hashed password value from orm query

2026-04-07 13:56:14 +00:00
parent 279a28c93c
commit f08499b346
1 changed files with 3 additions and 1 deletions
@@ -2,6 +2,7 @@ package com.drinkool.models;

 import com.drinkool.entities.BaseEntity;
 import com.drinkool.utils.PhoneValidator;
+import com.fasterxml.jackson.annotation.JsonProperty;
 import com.password4j.Password;
 import jakarta.persistence.*;
 import jakarta.transaction.*;
@@ -20,7 +21,8 @@ public abstract class UserModel extends BaseEntity {
 	public String phone;

 	@Column(nullable = false, length = 1024)
-	protected String hashedPassword;
+	@JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
+	public String hashedPassword;

 	@Transactional
 	public void signup(String phone) {