Merge pull request #3033 from barakmich/strip_pass

etcdhttp: Always strip password hash when returning users
This commit is contained in:
Xiang Li 2015-06-22 18:39:50 -07:00
commit ad7124599d

View File

@ -323,9 +323,7 @@ func (sh *authHandler) forUser(w http.ResponseWriter, r *http.Request, user stri
writeError(w, err)
return
}
if u.Password == "" {
newuser.Password = ""
}
newuser.Password = ""
if created {
w.WriteHeader(http.StatusCreated)