security - ClaimedIdentifier vs FriendlyIdentifier for storing in DB? Which is safer? -


i'm using openid 2.0 in application. need save openid identifier value in db verify user. can save email saving claimedidentifier seems approach.

why safe use claimedidentifier , not friendlyidentifier storing in db? difference make?

i both values in application, many posts avoid using friendlyidentifier due security issues. security issues can claimedidentifier overcome friendlyidentifier cannot?

figured 1 out too- truncating openid friendly identifier , saving random string in db might cause scripting issues if has replicated intuit openid url format , passed scripting values. better save full unique claimed identifier value(https) , fetch , truncate match user.


Comments

Popular posts from this blog

javascript - Laravel datatable invalid JSON response -

java - Exception in thread "main" org.springframework.context.ApplicationContextException: Unable to start embedded container; -

sql server 2008 - My Sql Code Get An Error Of Msg 245, Level 16, State 1, Line 1 Conversion failed when converting the varchar value '8:45 AM' to data type int -