From 54ceb4df7c0eff8f85d0b109257531b4ef664477 Mon Sep 17 00:00:00 2001 From: "Stanko K.R." Date: Fri, 5 Dec 2025 12:15:35 +0100 Subject: [PATCH] Remove email address and users from magic link response The identity endpoint can be used to fetch that information --- app/controllers/sessions/magic_links_controller.rb | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/app/controllers/sessions/magic_links_controller.rb b/app/controllers/sessions/magic_links_controller.rb index d8a566573..958e8834a 100644 --- a/app/controllers/sessions/magic_links_controller.rb +++ b/app/controllers/sessions/magic_links_controller.rb @@ -42,11 +42,7 @@ class Sessions::MagicLinksController < ApplicationController format.json do new_access_token = magic_link.identity.access_tokens.create!(permission: :write) - render json: { - email_address: magic_link.identity.email_address, - access_token: new_access_token.token, - users: magic_link.identity.users - } + render json: { access_token: new_access_token.token } end end else