fix: pull missing fields

packages/medusa/src/api/routes/store/customers/reset-password.js

@@ -24,7 +24,9 @@ import jwt from "jsonwebtoken"
  */
 export default async (req, res) => {
   const schema = Validator.object().keys({
-    email: Validator.string().email().required(),
+    email: Validator.string()
+      .email()
+      .required(),
     token: Validator.string().required(),
     password: Validator.string().required(),
   })
@@ -34,11 +36,12 @@ export default async (req, res) => {
     throw new MedusaError(MedusaError.Types.INVALID_DATA, error.details)
   }
 
-  try {
   const customerService = req.scope.resolve("customerService")
-    let customer = await customerService.retrieveByEmail(value.email)
+  let customer = await customerService.retrieveByEmail(value.email, {
+    select: ["id", "password_hash"],
+  })
 
-    const decodedToken = await jwt.verify(value.token, customer.password_hash)
+  const decodedToken = jwt.verify(value.token, customer.password_hash)
   if (!decodedToken || customer.id !== decodedToken.customer_id) {
     res.status(401).send("Invalid or expired password reset token")
     return
@@ -50,7 +53,4 @@ export default async (req, res) => {
 
   customer = await customerService.retrieve(customer.id)
   res.status(200).json({ customer })
-  } catch (error) {
-    throw error
-  }
 }

packages/medusa/src/services/customer.js

@@ -94,7 +94,16 @@ class CustomerService extends BaseService {
    * @return {string} the generated JSON web token
    */
   async generateResetPasswordToken(customerId) {
-    const customer = await this.retrieve(customerId)
+    const customer = await this.retrieve(customerId, {
+      select: [
+        "id",
+        "has_account",
+        "password_hash",
+        "email",
+        "first_name",
+        "last_name",
+      ],
+    })
 
     if (!customer.has_account) {
       throw new MedusaError(