-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
help wantedExtra attention is neededExtra attention is neededquestionFurther information is requestedFurther information is requested
Description
Currently, the SQLAlchemy models use Integer as the primary key (id) for most tables, including sensitive user-facing ones like User, Playlist, Song, etc. This exposes internal sequence and can lead to security/privacy concerns when surfaced in public APIs (e.g., GET /users/17).
Replacing id: Integer with UUID:
- Changing primary keys to
UUID(as_uuid=True)usingdefault=uuid.uuid4. - Updating Alembic migrations, Pydantic schemas, and CRUD logic accordingly.
- Benefits: no ID guessing.
Metadata
Metadata
Assignees
Labels
help wantedExtra attention is neededExtra attention is neededquestionFurther information is requestedFurther information is requested