Removing sessionToken and authData from _User objects included in a q…

…uery This bug caused sessionToken to be replaced on client side to some old sessionToken from DB.
simonas-notcat · Apr 11, 2016 · acb294d · acb294d
1 parent 281568e
commit acb294d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/RestQuery.js b/src/RestQuery.js
@@ -477,8 +477,9 @@ function includePath(config, auth, response, path) {
         obj.__type = 'Object';
         obj.className = includeResponse.className;
 
-        if(className == "_User"){
+        if (obj.className == "_User") {
           delete obj.sessionToken;
+          delete obj.authData;
         }
         replace[obj.objectId] = obj;
       }