Get Password field from Rest API

[pm1664]

Hi,

i would like to store some “sensitives” data in a “password” field in a collection.
I need to get/post/put the password from rest API.

the “Private field” is not checked in my collection.
i cannot get the “password” field in the http response.

Any advice to get or store this sensitives datas ?

Thanks!

[Boogey]

I believe by default any password field type is not included in API responses for security reasons, regardless of the checkbox “Private field” when editing the field.

If true, then I’d suggest that at least the “Private field” checkbox should be disabled for the password field type.

[Boogey]

This was previously answered here, and they suggest making a custom controller if you really want to send passwords in an API response:

Retrieve password from Collection

Password fields cannot be fetched, you will need to select a different field type or customize the controller and write your own sanitization function. As you can see here: https://strapi.io/documentation/developer-docs/latest/concepts/controllers.html#find We are using const { sanitizeEntity } = require('strapi-utils'); And the code for that function is here: strapi/sanitize-entity.js at master · strapi/strapi · GitHub Specifically we are stripping any password fields out: