danvics/pediatric-ai-scribe-v3
1
0
Fork 0
Code Issues Pull requests Projects Releases 14 Packages Wiki Activity Actions

Security: remove auth debug logging that exposed emails and responses

Browse source 
Removed console.log statements in auth.js that logged email addresses
and auth API responses to browser console. Final cleanup for v9.
This commit is contained in:
ifedan-ed 2026-03-29 10:41:35 +00:00
parent 0e350b8cad
commit 3d503ba309
1 changed files with 1 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
public/js/auth.js
View file

@ -15,11 +15,7 @@ document.addEventListener('DOMContentLoaded', function() {
var TOKEN_KEY = 'ped_scribe_token';
var USER_KEY = 'ped_scribe_user';
console.log('[Auth] Initializing...');
console.log('[Auth] authScreen:', !!authScreen);
console.log('[Auth] mainApp:', !!mainApp);
console.log('[Auth] loginForm:', !!loginForm);
console.log('[Auth] registerForm:', !!registerForm);
// Auth module initialized
// Make sure forms are visible/hidden correctly on load
showLoginForm();
@ -315,7 +311,6 @@ document.addEventListener('DOMContentLoaded', function() {
return false;
}
console.log('[Auth] Attempting login for:', email);
showLoading('Signing in...');
var body = { email: email, password: password };
@ -329,7 +324,6 @@ document.addEventListener('DOMContentLoaded', function() {
.then(function(r) { return r.json(); })
.then(function(data) {
hideLoading();
console.log('[Auth] Login response:', JSON.stringify(data).substring(0, 200));
if (data.requires2FA) {
var grp = document.getElementById('totp-group');
@ -413,7 +407,6 @@ document.addEventListener('DOMContentLoaded', function() {
return false;
}
console.log('[Auth] Registering:', email);
showLoading('Creating account...');
fetch('/api/auth/register', {
@ -424,7 +417,6 @@ document.addEventListener('DOMContentLoaded', function() {
.then(function(r) { return r.json(); })
.then(function(data) {
hideLoading();
console.log('[Auth] Register response:', JSON.stringify(data).substring(0, 200));
if (data.success && data.token && data.user) {
enterApp(data.user, data.token);