qq, can users see their own SuperTokens ID without...
# security-discussionc
coleski
07/28/2024, 9:37 PMqq, can users see their own SuperTokens ID without me disclosing it to them?
r
rp_st
07/29/2024, 4:16 AMHey @coleski yea they can. The access token they are sent has the user id in it. In the payload.
c
coleski
07/29/2024, 4:18 AMah. can they alter it?
im wanting something i can securely fetch data with as a key for non-sensitive but personal info
r
rp_st
07/29/2024, 4:18 AMThey can’t alter it. The access token verification will fail
c
coleski
07/29/2024, 4:18 AMgot it, ty
coleski
07/29/2024, 4:18 AMi admire the dedication btw
answering my dumb questions on a saturday and sunday night
very thankful ❤️
r
rp_st
07/29/2024, 4:19 AMNo question is dumb 🙂 happy to help.