在 Django + React webApp 中掩码 URL

Question

I want to share a page with clients over mail which is something like this:

https://blabla.com/docket/2443

but if I do so they can access all other pages by just changing the docket no. ie 2443 in this case. I tried to use tiny-url but it's of no use. Is there any way to mask the URL to solve the above problem?

Answer 1

There are multiple solutions to that problem.

1. If that endpoint requires a login and related to a User , you can add permissions to that endpoint which makes it only accessible for the user(s) who are related to it.

2. If it is a public URL, You can make the id more sophisticated than an integer, you can make the id field a UUIDField , which makes it really hard to guess any other dockets ids.