Merge pull request etcd-io#3033 from barakmich/strip_pass

etcdhttp: Always strip password hash when returning users
caszkgui · Jun 23, 2015 · ad71245 · ad71245
2 parents 7f7e2cc + d5a0e3a
commit ad71245
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/etcdserver/etcdhttp/client_auth.go b/etcdserver/etcdhttp/client_auth.go
@@ -323,9 +323,7 @@ func (sh *authHandler) forUser(w http.ResponseWriter, r *http.Request, user stri
 			writeError(w, err)
 			return
 		}
-		if u.Password == "" {
-			newuser.Password = ""
-		}
+		newuser.Password = ""
 
 		if created {
 			w.WriteHeader(http.StatusCreated)