How to hide user password ? in User Create Function

I want to hide password from REST API api/v2/auth/register ? How can i do that ?

AuthController.php

    public function register(RegisterRequest $request)
    {


        $validated = $request->validated();




        $isUserCreate = User::create($validated);


        if ($isUserCreate) {

            return Response::json([
                'status' => true,
                'message' => 'User Created',
                'data' => $validated
            ], 200);
            return Response::json([$validated], 200);
        }

    }

output

POST http://127.0.0.1:8000/api/auth/register

HTTP/1.1 200 OK
Host: 127.0.0.1:8000
Date: Sun, 06 Feb 2022 00:09:51 GMT
Connection: close
X-Powered-By: PHP/8.0.13
Cache-Control: no-cache, private
Date: Sun, 06 Feb 2022 00:09:51 GMT
Content-Type: application/json
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 58
Access-Control-Allow-Origin: *

{
  "status": true,
  "message": "User Created",
  "data": {
    "name": "Amrith",
    "email": "[email protected]",
    "password": "abc123"
  }
}

Response code: 200 (OK); Time: 581ms; Content length: 110 bytes

cosmeoes

4 years ago

Level 1

I think Array::except might be useful here:

 return Response::json([
                'status' => true,
                'message' => 'User Created',
                'data' => Array::except($validated, ['password'])
            ], 200);

1 like

Amrith

4 years ago

Level 1

@cosmeoes Is that possible me to do it in UserModel level ?

tykus

4 years ago

Best Answer

Level 104

Return the User instance (array/JSON representation):

return Response::json([
    'status' => true,
    'message' => 'User Created',
    'data' => $user->toArray()
], 200);

The advantage is (i) it will respect hidden fields on the User instance (ii) any accessors you define on the User model are also respected (iii) it actually represents the User instance rather than the Request payload.

1 like

Amrith

4 years ago

Level 1

@tykus Agreed.

Controller


        $user = User::create($validated);


        if ($user) {

            return Response::json([
                'status' => true,
                'message' => 'User Created',
                'data' => $user
            ], 200);
            return Response::json([$validated], 200);
        }

  protected $hidden = [
        'password',
        'remember_token',
        'created_at',
        'updated_at'
    ];

theProfit

4 years ago

Level 7

Please start using the https://laravel.com/docs/8.x/eloquent-resources, here you have more power over the output.

Please or to participate in this conversation.