rocksky.app
A decentralized music tracking and discovery platform built on AT Protocol 🎵
rocksky.app
spotify
atproto
lastfm
musicbrainz
scrobbling
listenbrainz
fix(api): omit spotify email from getProfile response
The spotifyUser object was spread verbatim into app.rocksky.actor.getProfile,
leaking the user's Spotify account email. Strip it like the token secrets
already are.
author
Tsiry Sandratraina
date
(Jul 27, 2026, 12:01 PM +0300)
commit
971c0e22
971c0e221f8cac42642b95577062868b8a9399f6
parent
ef801fcf
ef801fcf5af8ef5068965cf5ea87a32a1a9eaa2d
+1
-1
+1
-1
apps/api/src/xrpc/app/rocksky/actor/getProfile.ts
+1
-1
apps/api/src/xrpc/app/rocksky/actor/getProfile.ts
···
396
396
createdAt: profile.user?.createdAt.toISOString(),
397
397
updatedAt: profile.user?.updatedAt.toISOString(),
398
398
spotifyUser: {
399
-
...spotifyUser,
399
+
...R.omit(["email"], spotifyUser),
400
400
createdAt: spotifyUser?.createdAt.toISOString(),
401
401
updatedAt: spotifyUser?.updatedAt.toISOString(),
402
402
},