Is profileId returned by auth considered sensitive?
-
I'm beginning to get into social features and I want some cloud code to pick up shared entities of another player.
When designing my game, is the standard way for a player to lookup another player playerId? Meaning, if they click on a profile in a leaderboard, to get that players info, would I be using a request that pulls via profileId?
If that's the case, a bad-actor could look at the network requests and discover other players' playerIds, just wondering if that's of concern or not. Obviously ACL settings are the most important to have set properly, but wondering if profileID should be considered sensitive entirely
-
It's not. Just knowing a playerId is really not important as it's only a unique identifier for another player and nothing more than that.