3 ms·
1) They don't need UUIDs as a pkey, but just as another field. I like using auto-incrementing IDs as the primary key, and UUIDs for referencing records over int
by jonny_eh 9y ago
1) They don't need UUIDs as a pkey, but just as another field. I like using auto-incrementing IDs as the primary key, and UUIDs for referencing records over internet-facing APIs. Best of both worlds!
2) Totally, JWTs are evil.
- tehlike 9y agoBack in the day uuid as pk was very inefficient due to sorted nature of pk. Time dependent uuid might be less so. You are right, another uuid field would have solved this.
- testplzignore 9y agoI don't know much about JWTs. Why are they bad?
- zrail 9y agoJWT itself is a nice container for signing a small amount of JSON and being able to easily pass that around. I use it a lot for situations where I want to ensure someone hasn't futzed with the data, and/or I want an auto-expiring token of some sort. JWT, by itself, is not an authentication and authorization system, but people often use it as such.