fix(core): Remove sensitive data from User entity during serialization (no-changelog) (#8773)

packages/cli/src/databases/entities/User.ts

@@ -141,4 +141,9 @@ export class User extends WithTimestamps implements IUser {
 			scopeOptions,
 		);
 	}
+
+	toJSON() {
+		const { password, apiKey, mfaSecret, mfaRecoveryCodes, ...rest } = this;
+		return rest;
+	}
 }