3 ms·
I think the issue is that a hacked client could send a bad "UUID", not that properly randomly generated tokens would collide.
by sweeneyrod 6y ago
I think the issue is that a hacked client could send a bad "UUID", not that properly randomly generated tokens would collide.
- actuator 6y agoWhat will that accomplish though? The way he described their auth APIs, you will be able to set an auth token generated by you for an account that you anyway have the user credentials for.
- zimmerfrei 6y agoWhat is a bad “UUID”? A wouldn’t the hacked client do things anyway like uploading UID or local credentials to its servers?