fix: remove visitor token from visitors.info endpoint

Merged
JU
5mo ago
+18-1

Proposed changes (including videos or screenshots)

As seen here, https://developer.rocket.chat/apidocs/get-visitor-information-by-id-1, token is returned in the response. It looks like there's no use case for the token to be present in the response and it would be a good security practice to remove it altogether.

Issue(s)

https://rocketchat.atlassian.net/browse/VLN-367

Steps to test or reproduce

  • N/A

Further comments

  • N/A

Summary by CodeRabbit

  • Bug Fixes
    • Fixed a security issue where visitor authentication tokens were being exposed in the visitors.info API response. The system now properly excludes sensitive token data.

Review Change Stack