Implement NanoID instead of UUID
thaalesalves opened this issue · comments
Summary
Implementation of NanoID instead of UUID to keep things just as safe and without risk of repetition while having smaller IDs that are easier to save.
Details
NanoID is a mechanic of ID that is just as safe and repetition risk-free as UUID, but we have more control over format and characters used, which makes them easier to use.
NanoID for Java apparently lies on usage of java.util.Random
, which is highly insecure. Before using NanoIDs, we should see if it supports usage of java.security.SecureRandom
instead. For more details, we can check its repo.