Mask sensitive data

This commit is contained in:
2025-08-05 21:55:32 -07:00
parent b4b1210071
commit 41e497730f
+7 -1
View File
@@ -15,6 +15,9 @@ namespace BoredCareers.Controllers {
if (isLoggedIn()) { if (isLoggedIn()) {
if (await isLoggedInUserEmployeeOf(CompanyID)) { if (await isLoggedInUserEmployeeOf(CompanyID)) {
Employee[] employees = await _databaseService.GetEmployeesFromCompany(CompanyID); Employee[] employees = await _databaseService.GetEmployeesFromCompany(CompanyID);
foreach (Employee cur in employees) {
cur.Company.EmailToken = "";
}
return Ok(employees); return Ok(employees);
} }
return NotFound("You are not an employee of company"); return NotFound("You are not an employee of company");
@@ -25,7 +28,10 @@ namespace BoredCareers.Controllers {
[HttpGet] [HttpGet]
public async Task<IActionResult> GetEmployee() { public async Task<IActionResult> GetEmployee() {
if (isLoggedIn()) { if (isLoggedIn()) {
Employee[] employees = await _databaseService.GetEmployeesFromAccount(getLoggedInUserID()); Employee[] employees = await _databaseService.GetEmployeeOfCompanyByAccountID(getLoggedInUserID());
foreach (Employee cur in employees) {
cur.Company.EmailToken = "";
}
return Ok(employees); return Ok(employees);
} }
return NotFound("Not logged in"); return NotFound("Not logged in");