sanitize task when updating in v2

website/server/controllers/api-v2/user.js

@@ -867,7 +867,20 @@ api.updateTask = function(req, res, next) {
     if(!task) return res.status(404).json({err: 'Task not found.'})
 
     try {
-      _.assign(task, shared.ops.updateTask(task.toObject(), req)[0]);
+      // we have to convert task to an object because otherwise things don't get merged correctly. Bad for performances?
+      let [updatedTaskObj] = shared.ops.updateTask(task.toObject(), req);
+
+      // Sanitize differently user tasks linked to a challenge
+      let sanitizedObj;
+
+      if (task.userId && task.challenge && task.challenge.id) {
+        sanitizedObj = Tasks.Task.sanitizeUserChallengeTask(updatedTaskObj);
+      } else {
+        sanitizedObj = Tasks.Task.sanitize(updatedTaskObj);
+      }
+
+      _.assign(task, sanitizedObj);
+
       task.save(function(err, task){
         if(err) return next(err);
 

website/server/models/task.js

@@ -12,7 +12,7 @@ let discriminatorOptions = {
 };
 let subDiscriminatorOptions = _.defaults(_.cloneDeep(discriminatorOptions), {
   _id: false,
-  minimize: false,
+  minimize: false, // So empty objects are returned
 });
 
 export let tasksTypes = ['habit', 'daily', 'todo', 'reward'];