From b65ee59b1bf03a972079439e8f838e4040dfa874 Mon Sep 17 00:00:00 2001 From: JocelynDelalande Date: Fri, 22 Dec 2017 17:39:48 +0100 Subject: Remove API password (#290) * Remove the password from API GET responses While keeping it for POST/PUT. fix #289 * Add a test to check password change via API --- CHANGELOG.rst | 1 + 1 file changed, 1 insertion(+) (limited to 'CHANGELOG.rst') diff --git a/CHANGELOG.rst b/CHANGELOG.rst index fffc8c5..35cf91c 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -12,6 +12,7 @@ Breaking changes - ``ADMIN_PASSWORD`` is now stored hashed. The ``ihatemoney generate_password_hash`` command can now be used to generate a proper password HASH (#236) - Turn the WSGI file into a python module, renamed from budget/ihatemoney.wsgi to ihatemoney/wsgi.py. Please update your Apache/Gunicorn configuration! (#218) - Admin privileges are now required to access the dashboard (#262) +- `password` field has been removed from project API GET views (#289) Changed ======= -- cgit v1.1