Is profileId returned by auth considered sensitive?
-
I'm beginning to get into social features and I want some cloud code to pick up shared entities of another player.
When designing my game, is the standard way for a player to lookup another player playerId? Meaning, if they click on a profile in a leaderboard, to get that players info, would I be using a request that pulls via profileId?
If that's the case, a bad-actor could look at the network requests and discover other players' playerIds, just wondering if that's of concern or not. Obviously ACL settings are the most important to have set properly, but wondering if profileID should be considered sensitive entirely
-
It's not. Just knowing a playerId is really not important as it's only a unique identifier for another player and nothing more than that.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login