diff --git a/api/v1/jwt.go b/api/v1/jwt.go index d306cd4b..545e62f1 100644 --- a/api/v1/jwt.go +++ b/api/v1/jwt.go @@ -63,7 +63,7 @@ func JWTMiddleware(s *APIV1Service, next echo.HandlerFunc, secret string) echo.H accessToken := findAccessToken(c) if accessToken == "" { // When the request is not authenticated, we allow the user to access the shortcut endpoints for those public shortcuts. - if util.HasPrefixes(path, "/s/") && method == http.MethodGet { + if util.HasPrefixes(path, "/s/", "/api/v1/user/") && method == http.MethodGet { return next(c) } return echo.NewHTTPError(http.StatusUnauthorized, "Missing access token") diff --git a/api/v1/user.go b/api/v1/user.go index 6ff00144..c516fd4d 100644 --- a/api/v1/user.go +++ b/api/v1/user.go @@ -188,7 +188,12 @@ func (s *APIV1Service) registerUserRoutes(g *echo.Group) { return echo.NewHTTPError(http.StatusInternalServerError, fmt.Sprintf("Failed to find user, err: %s", err)).SetInternal(err) } - return c.JSON(http.StatusOK, convertUserFromStore(user)) + userMessage := convertUserFromStore(user) + userID, ok := c.Get(userIDContextKey).(int32) + if !ok { + userMessage.Email = "" + } + return c.JSON(http.StatusOK, userMessage) }) g.PATCH("/user/:id", func(c echo.Context) error {