generator-jhipster-quarkus icon indicating copy to clipboard operation
generator-jhipster-quarkus copied to clipboard

Avoid password and resetKey column to be sorted by the /users API

Open avdev4j opened this issue 4 years ago • 2 comments

related to https://github.com/jhipster/generator-jhipster/pull/12327

Check if this could be done for Quarkus too. Security fix.

avdev4j avatar Dec 09 '20 22:12 avdev4j

we need to implement sorting on users first. cc @danielpetisme

example:

    public static List<User> findAllByLoginNot(Page page, String login, String column, String order) {
        return find("login != ?1", Sort.by(column, Sort.Direction.valueOf(order))).page(page).list();
    }

avdev4j avatar Jan 11 '21 21:01 avdev4j

I would build the sort object before invoking the method (just as the Page object).

danielpetisme avatar Jan 11 '21 22:01 danielpetisme