Now API doesn't return sensitive user information.

Excluded:
GET vote:  _id, email
GET comment: pw

Author: Nitro

src/database/comment.js

@@ -48,14 +48,13 @@ async function deleteComment(id, pw) {
 
 async function getComment(date1, date2) {
     const db = await getDB()
-    // [TODO] exclude pw
     let result = await db.collection(colName).find(
         {
             date: {
                 $gte: new Date(date1),
                 $lt: new Date(date2)
             }
-        }
+        }, { projection: { pw: 0 } }
     ).toArray()
     return result
 }

src/database/vote.js

@@ -52,14 +52,13 @@ async function updateVote(date, meal, email, rate) {
 
 async function getVote(date1, date2) {
     const db = await getDB()
-    // [TODO] exclude _id and email array from the result
     let result = await db.collection(colName).find(
         {
             date: {
                 $gte: new Date(date1),
                 $lt: new Date(date2)
             }
-        }
+        }, { projection: { _id: 0, email: 0 } }
     ).toArray()
     return result
 }

src/index.js

@@ -93,8 +93,6 @@ app.post('/vote', async (req, res) => {
   if (r) {
     callback(res, 200, 'POST Success: User rate has been successfully reflected.'
     )
-  } else {
-    callback(res, 400, 'POST Error: Unknown Error.')
   }
 })
 
@@ -192,8 +190,6 @@ app.post('/comment', async (req, res) => {
   })
   if (r) {
     callback(res, 200, 'POST Success: Comment Added.')
-  } else {
-    callback(res, 400, 'POST Error: Unknown Error.')
   }
 })
 
@@ -221,8 +217,6 @@ app.post('/delete_comment', async (req, res) => {
   })
   if (r) {
     callback(res, 200, 'POST Success: Comment Removed.')
-  } else {
-    callback(res, 400, 'POST Error: Unknown Error.')
   }
 })