From 641ae502655b9da2222fdfc82bcc7912b517112b Mon Sep 17 00:00:00 2001 From: julius Date: Sun, 16 Mar 2025 12:40:50 +0100 Subject: [PATCH] feat: improve on data privacy --- main.py | 6 +++++- security.py | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/main.py b/main.py index 34b7f70..4fee76b 100644 --- a/main.py +++ b/main.py @@ -62,7 +62,11 @@ def add_players(players: list[Player]): def list_players(): with Session(engine) as session: statement = select(Player).order_by(Player.display_name) - return session.exec(statement).fetchall() + players = session.exec(statement).fetchall() + return [ + player.model_dump(include={"id", "display_name", "number"}) + for player in players + ] def list_teams(): diff --git a/security.py b/security.py index 0dc76e6..aeaff35 100644 --- a/security.py +++ b/security.py @@ -283,7 +283,7 @@ async def change_password( async def read_player_me( current_user: Annotated[Player, Depends(get_current_active_user)], ): - return current_user + return current_user.model_dump(exclude={"hashed_password", "disabled"}) async def read_own_items(