fix(backend): recursively strip private_metadata from resource _raw in SSR sanitizer

The previous fix only removed the top-level `_raw.private_metadata`, but a
`User`'s `_raw` payload nests further private metadata — each
`organization_memberships[*]` carries its own `private_metadata` plus a nested
`organization.private_metadata` — which still serialized into
`__clerk_ssr_state`.

Redact `private_metadata`/`privateMetadata` recursively on a deep clone of
`_raw` so nested fields are stripped while the original resource (and its `raw`
getter) is left untouched. Adds a regression test for the
`organization_memberships` shape.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: dominic-clerk

packages/backend/src/util/__tests__/decorateObjectWithResources.test.ts

@@ -52,6 +52,55 @@ describe('stripPrivateDataFromObject', () => {
     expect((result.organization as any)._raw.public_metadata).toEqual({ tier: 'enterprise' });
   });
 
+  it('recursively strips private_metadata nested under `_raw.organization_memberships`', () => {
+    const user = User.fromJSON({
+      id: 'user_1',
+      object: 'user',
+      private_metadata: { ssn: '000-00-0000' },
+      public_metadata: { plan: 'pro' },
+      email_addresses: [],
+      phone_numbers: [],
+      web3_wallets: [],
+      external_accounts: [],
+      enterprise_accounts: [],
+      organization_memberships: [
+        {
+          id: 'orgmem_1',
+          object: 'organization_membership',
+          role: 'admin',
+          permissions: [],
+          private_metadata: { membershipSecret: 'mem_secret' },
+          public_metadata: { seat: 'a' },
+          created_at: 1,
+          updated_at: 1,
+          organization: {
+            id: 'org_1',
+            object: 'organization',
+            name: 'Acme',
+            slug: 'acme',
+            private_metadata: { billingCustomerId: 'cus_secret' },
+            public_metadata: { tier: 'enterprise' },
+          },
+        },
+      ],
+    } as any);
+
+    const result = stripPrivateDataFromObject({ user });
+
+    const serialized = JSON.stringify(result);
+    expect(serialized).not.toContain('000-00-0000');
+    expect(serialized).not.toContain('mem_secret');
+    expect(serialized).not.toContain('cus_secret');
+
+    const membership = (result.user as any)._raw.organization_memberships[0];
+    expect(membership).not.toHaveProperty('private_metadata');
+    expect(membership.organization).not.toHaveProperty('private_metadata');
+
+    // Public metadata throughout the nested payload is intentionally preserved.
+    expect(membership.public_metadata).toEqual({ seat: 'a' });
+    expect(membership.organization.public_metadata).toEqual({ tier: 'enterprise' });
+  });
+
   it('does not mutate the original resource `raw` payload', () => {
     const user = User.fromJSON({
       id: 'user_1',

packages/backend/src/util/decorateObjectWithResources.ts

@@ -63,14 +63,36 @@ function prunePrivateMetadata(resource?: { private_metadata?: any; privateMetada
     }
     // Backend resources (`User`, `Organization`) retain the full Backend API
     // payload on the enumerable `_raw` property, which still contains
-    // `private_metadata`. Strip it from a shallow clone so the original
-    // resource (and its `raw` getter) is left untouched.
+    // `private_metadata`. The payload is also nested (e.g. a `User`'s
+    // `organization_memberships[*]` each carry their own `private_metadata`
+    // and a nested `organization.private_metadata`), so redact recursively on
+    // a deep clone — leaving the original resource (and its `raw` getter)
+    // untouched.
     if ('_raw' in resource && resource['_raw']) {
-      const raw = { ...resource['_raw'] };
-      delete raw['private_metadata'];
-      resource['_raw'] = raw;
+      resource['_raw'] = redactPrivateMetadataDeep(resource['_raw']);
     }
   }
 
   return resource;
 }
+
+/**
+ * Returns a deep clone of `value` with every `private_metadata` / `privateMetadata`
+ * property removed at any depth.
+ */
+function redactPrivateMetadataDeep(value: any): any {
+  if (Array.isArray(value)) {
+    return value.map(redactPrivateMetadataDeep);
+  }
+  if (value && typeof value === 'object') {
+    const clone: Record<string, any> = {};
+    for (const key of Object.keys(value)) {
+      if (key === 'private_metadata' || key === 'privateMetadata') {
+        continue;
+      }
+      clone[key] = redactPrivateMetadataDeep(value[key]);
+    }
+    return clone;
+  }
+  return value;
+}