users api endpoint cleanup

Author: b5

user/user.go

@@ -30,7 +30,7 @@ type User struct {
 	// password, only really used on account creation
 	password string
 	// user's email address
-	Email string `json:"email" sql:"email"`
+	Email string `json:"email,omitempty" sql:"email"`
 	// user name field. could be first[space]last, but not strictly enforced
 	Name string `json:"name" sql:"name"`
 	// user-filled description of self

user_handlers.go

@@ -74,6 +74,12 @@ func ListUsersHandler(w http.ResponseWriter, r *http.Request) {
 			ErrRes(w, err)
 			return
 		}
+		// TODO - should this be here?
+		for _, u := range res {
+			// remove sensitive fields
+			u.Email = ""
+		}
+
 		Res(w, envelope, res)
 	}