Retrieve password from Collection

DMehaffy · December 29, 2020, 5:28pm

Password fields cannot be fetched, you will need to select a different field type or customize the controller and write your own sanitization function.

As you can see here: https://strapi.io/documentation/developer-docs/latest/concepts/controllers.html#find

We are using

const { sanitizeEntity } = require('strapi-utils');

And the code for that function is here: strapi/sanitize-entity.js at master · strapi/strapi · GitHub

Specifically we are stripping any password fields out:

github.com

strapi/strapi/blob/24ddb69bc019570497af062e07cfcfd643495146/packages/strapi-utils/lib/sanitize-entity.js#L142-L150

    
      
          const shouldRemoveAttribute = (model, key, attribute = {}, { withPrivate, isOutput }) => {
            const isPassword = attribute.type === 'password';
            const isPrivate = isPrivateAttribute(model, key);
          
          
  const shouldRemovePassword = isOutput;
            const shouldRemovePrivate = !withPrivate && isOutput;
          
          
  return !!((isPassword && shouldRemovePassword) || (isPrivate && shouldRemovePrivate));
          };