Remove email address and users from magic link response

The identity endpoint can be used to fetch that information
2025-12-05 12:15:35 +01:00
parent b92982b244
commit 54ceb4df7c
1 changed files with 1 additions and 5 deletions
@@ -42,11 +42,7 @@ class Sessions::MagicLinksController < ApplicationController

          format.json do
            new_access_token = magic_link.identity.access_tokens.create!(permission: :write)
-            render json: {
-              email_address: magic_link.identity.email_address,
-              access_token: new_access_token.token,
-              users: magic_link.identity.users
-            }
+            render json: { access_token: new_access_token.token }
          end
        end
      else