src/Server/Controllers/EmployeeController.cs

@@ -15,6 +15,9 @@ namespace BoredCareers.Controllers {
             if (isLoggedIn()) {
                 if (await isLoggedInUserEmployeeOf(CompanyID)) { 
                     Employee[] employees = await _databaseService.GetEmployeesFromCompany(CompanyID);
+                    foreach (Employee cur in employees) {
+                        cur.Company.EmailToken = "";
+                    }
                     return Ok(employees);
                 }
                 return NotFound("You are not an employee of company");
@@ -25,7 +28,10 @@ namespace BoredCareers.Controllers {
         [HttpGet]
         public async Task<IActionResult> GetEmployee() {
             if (isLoggedIn()) {
-                Employee[] employees = await _databaseService.GetEmployeesFromAccount(getLoggedInUserID());
+                Employee[] employees = await _databaseService.GetEmployeeOfCompanyByAccountID(getLoggedInUserID());
+                foreach (Employee cur in employees) {
+                    cur.Company.EmailToken = "";
+                }
                 return Ok(employees);
             }
             return NotFound("Not logged in");