Offer "encryption" out of the box
Airblader opened this issue · comments
What's your idea?
The idea to somehow "encrypt" or "encode" the parameters came up multiple times now, for one of two reasons:
- Decrease URL length for concerns of "hitting a limit" (specifically in IE)
- Security concerns in real-life projects
We should consider how we could support this if this is a frequent use-case.
Describe the solution you'd like
Two possible solutions:
- Offer pre-built functions to "secure" the data. The advantage is a small API surface and flexibility of offering different mechanisms, e.g. with varying levels of security (simple encoding all the way to some proper encryption)
- Implement a new configuration option on QueryParam level.
Additional context
This is currently possible by providing custom (de-)serializers, but requires the user to do it manually everytime.
We should consider how we could support this if this is a frequent use-case.
I have gotten this question several times now, so there's definitely a need for it. :-)