Introduction In this article, I’m going to show you the best way to hide the JPA entity identifier so that the users of your application won’t be able to guess and access data that belongs to other users. This has been a recurring question that I’ve been getting when running training or workshops, so I decided it’s a good idea to formalize it in an article, Domain Model Let’s assume we are using the following Post and PostComment entities: Notice that both the Post and PostComment use numerical identifiers, and, most often,... Read More
The post The best way to hide the JPA entity identifier appeared first on Vlad Mihalcea.