Auto-generated id safe to expose in url param

Elastic Stack Elasticsearch
1

Hi guys,

Just want to ask how the index id is automatically generated and it is safe
to use in url param like this?

/customers/?customer_id=sh_8aCaiQB-v4ZEqJfBzlg

Regards,
Son.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

2

You mean document ID?

If so, yes it's auto generated if you don't provide it.
It's a unique id.

Your URL doesn't seem to be an Elasticsearch URL, does it?

--
David Pilato | Technical Advocate | Elasticsearch.com
@dadoonet | @elasticsearchfr | @scrutmydocs

Le 20 févr. 2013 à 12:41, Le Son Phung son@wego.com a écrit :

Hi guys,

Just want to ask how the index id is automatically generated and it is safe to use in url param like this?

/customers/?customer_id=sh_8aCaiQB-v4ZEqJfBzlg

Regards,
Son.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

3

Ah yes I mean document id.

I will expose it in my front-end app and once the front-end app get the id
it will use it to query against ES.

So not sure if I need to escape document id when I pass it around in the
http url?

Separately, just curious, unique id in a sense of per cluster, per index,
or per universe (hardly collided)?

On Wednesday, 20 February 2013 19:44:01 UTC+8, David Pilato wrote:

You mean document ID?

If so, yes it's auto generated if you don't provide it.
It's a unique id.

Your URL doesn't seem to be an Elasticsearch URL, does it?

--
David Pilato | Technical Advocate | Elasticsearch.com
@dadoonet https://twitter.com/dadoonet | @elasticsearchfrhttps://twitter.com/elasticsearchfr
| @scrutmydocs https://twitter.com/scrutmydocs

Le 20 févr. 2013 à 12:41, Le Son Phung <s...@wego.com <javascript:>> a
écrit :

Hi guys,

Just want to ask how the index id is automatically generated and it is
safe to use in url param like this?

/customers/?customer_id=sh_8aCaiQB-v4ZEqJfBzlg

Regards,
Son.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
For more options, visit https://groups.google.com/groups/opt_out.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

4

Le Son Phung wrote:

Ah yes I mean document id.

I will expose it in my front-end app and once the front-end app get the id
it will use it to query against ES.

So not sure if I need to escape document id when I pass it around in the
http url?

Separately, just curious, unique id in a sense of per cluster, per index,
or per universe (hardly collided)?

Per universe. It's a base64-encoded random UUID. Collisions are
theoretically possible, but I would focus on other parts of your
application first. :slight_smile:

http://git.io/L1-mpA

-Drew

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.