Home/ Questions/Q 8468677
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T16:00:06+00:00

Suppose I have two collections/schemas. One is the Users Schema with username and password

  • 0

Suppose I have two collections/schemas. One is the Users Schema with username and password fields, then, I have a Blogs Schema that has a reference to the Users Schema in the author field. If I use Mongoose to do something like

Blogs.findOne({...}).populate("user").exec()

I will have the Blog document and the user populated too, but how do I prevent Mongoose/MongoDB from returning the password field? The password field is hashed but it shouldn’t be returned.

I know I can omit the password field and return the rest of the fields in a simple query, but how do I do that with populate. Also, is there any elegant way to do this?

Also, in some situations I do need to get the password field, like when the user wants to login or change the password.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team
    .populate('user' , '-password')

    http://mongoosejs.com/docs/populate.html

    JohnnyHKs answer using Schema options is probably the way to go here.

    Also note that query.exclude() only exists in the 2.x branch.

    • 0