3 ms·
Great question! Currently, the PantryID (uuidv4) is the only form of security, I am thinking that in a future release perhaps another form of authorization may
by fiveSpeedManual 6y ago
Great question!
Currently, the PantryID (uuidv4) is the only form of security, I am thinking that in a future release perhaps another form of authorization may be required.
Do you have any suggestions - I'm all ears!
- osrec 6y agoYeah, I imagine this is okay for testing, since UUIDs are fairly impossible to guess, however, you probably want a slightly more elaborate "authenticated session" based structure to ensure someone malicious who has obtained the UUID does not have an unlimited time window to exploit it.