Auth endpoint /auth/local is over-fetching data - how to create custom controller?

dhruv · March 4, 2021, 12:18pm

I too faced similar problem so, I extended the Auth.js file

Steps you need to take
create this directory structure
/extensions/users-permissions/controllers/Auth.js

Go here and copy paste the whole file

strapi/strapi/blob/master/packages/strapi-plugin-users-permissions/controllers/Auth.js

'use strict';

/**
 * Auth.js controller
 *
 * @description: A set of functions called "actions" for managing `Auth`.
 */

/* eslint-disable no-useless-escape */
const crypto = require('crypto');
const _ = require('lodash');
const grant = require('grant-koa');
const { sanitizeEntity } = require('strapi-utils');

const emailRegExp = /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
const formatError = error => [
  { messages: [{ id: error.id, message: error.message, field: error.field }] },
];

module.exports = {

This file has been truncated. show original

On line 71 you will see a fetch query for user

const user = await strapi.query('user', 'users-permissions').findOne(query);

replace it with

const user = await strapi.query('user', 'users-permissions').findOne(query, []);

Empty array means it won’t populate any relation fields, if you want any relations fields to be populate, add their fieldName as string inside the array