yunojuno / django-charid-field

Provides a prefixable, string-based ID field for your Django models. Supports cuid, ksuid, ulid & more.
MIT License
33 stars 4 forks source link

Migrate to CUID2 #9

Open wgordon17 opened 1 year ago

wgordon17 commented 1 year ago

CUID has been marked as deprecated and insecure: https://github.com/paralleldrive/cuid

They recommend migrating to CUID2: https://github.com/paralleldrive/cuid2

There is a CUID2 python port available here: https://github.com/overflowdigital/cuid2.py

wgordon17 commented 1 year ago

Heh, guess I should've read the README a bit better

It can utilise cuid, ksuid, ulid or any other string-based UID generation systems.

So this is just a fix for the README table to point to the CUID2 python port 😉

djm commented 1 year ago

@wgordon17 Nice, I appreciate the heads-up on this as that seems to be a relatively new revelation (21 days ago). We'll update the README shortly.

For us, thankfully we use them only as identifiers and are not using them in any kind of secure context (such as token based password reset, etc).