From 47cc2915515103500e6a13c33e25242156db88fd Mon Sep 17 00:00:00 2001
From: adrinr <adria@budibase.com>
Date: Thu, 16 Mar 2023 10:34:46 +0100
Subject: [PATCH] Exclude session fields

---
 .../src/db/searchIndexes/searchIndexes.ts            | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/packages/backend-core/src/db/searchIndexes/searchIndexes.ts b/packages/backend-core/src/db/searchIndexes/searchIndexes.ts
index a7cfd92e21..f03259b47f 100644
--- a/packages/backend-core/src/db/searchIndexes/searchIndexes.ts
+++ b/packages/backend-core/src/db/searchIndexes/searchIndexes.ts
@@ -16,7 +16,17 @@ export async function createUserIndex() {
     if (user._id && !user._id.startsWith("us_")) {
       return
     }
-    const ignoredFields = ["_id", "_rev", "password"]
+    const ignoredFields = [
+      "_id",
+      "_rev",
+      "password",
+      "account",
+      "license",
+      "budibaseAccess",
+      "accountPortalAccess",
+      "csrfToken",
+    ]
+
     function idx(input: Record<string, any>, prev?: string) {
       for (let key of Object.keys(input)) {
         if (ignoredFields.includes(key)) {