How to make the auto generated ID unique values not auto incremented

[WardenCommander]

@d_w

I am not an expert in API designs, however, it feels like incremental id’s are a bad idea in an authenticated setting, users might just be able to change an id (to the next incremental value) and view information that they were not meant to see. I am sure you have probably thought of this, hence, is there a better design pattern I should employ? if so, could you give a brief example for completeness.

thanks!
DW

you would normally block your content behind authorization (example: Bearer token) so only allowed users could fetch data.
Or you could add custom route that would accept only uuid input and then return only data that is connected to that uuid