diff --git a/src/Routers/ClassesRouter.js b/src/Routers/ClassesRouter.js index c9fe9c4834..95a27ef1e2 100644 --- a/src/Routers/ClassesRouter.js +++ b/src/Routers/ClassesRouter.js @@ -54,10 +54,17 @@ export class ClassesRouter { throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'Object not found.'); } - if(req.params.className === "_User"){ + if (req.params.className === "_User") { + delete response.results[0].sessionToken; - } - + + const user = response.results[0]; + + if (req.auth.user && user.objectId == req.auth.user.id) { + // Force the session token + response.results[0].sessionToken = req.info.sessionToken; + } + } return { response: response.results[0] }; }); }