GetUserRes does not appear to return all information

[pwalenta]

I'm trying to use the GetUserReq/Res and I'm running into an issue.

The response does not include password, pin or digest credentials.

According to the schema, values should be returned.

Does anyone know if this is expected behavior or am I missing something?

[dstaudt · Accepted solution]

The actual credential secrets (password/pin/digest p/w) are not returned by design.  This follows security best practice for most authentication data stores (e.g. LDAP.)

I would agree the schema could benefit from an annotation to that effect to avoid confusion...

[pwalenta]

Ok, I built my data type out assuming all that info was returned, and when I started getting errors I wasn't sure what I missing.

Thanks for the clarification.