florimondmanca/djangorestframework-api-key

API Key object pk/id created with api-key and hashed api key

Closed this issue · 1 comments

Hey, what is the reason for saving API-key.Hached API-key in as id?
is there some thing specific to security or what?
Thanks

Hi @umair313

You can get more context around this issue in #128 and related discussions.

This can be considered a historical design "flaw". I can't exactly remember the reason why I went with this design. My feeling is that we could move to traditional integer PKs without regret. Please feel free to comment and discuss on #128 if you have more ideas on this topic.

Thanks!