Angular 5/6 project query parameter encryption

Question

I'm trying to encrypt query parameters in an Angular 5/6 project. We have some sensitive data in the URL which we might need to encrypt or hash so an outside user won't know.

Is there a way to do that or worth doing? For example, would that be really safe, or maybe have a big impact on performance?

I've seen some routing configured as /edit/:id/:name, but I'm confused as to whether it's really safe to expose the ID or other parameters in the URL.

What do you mean "safe"? What specific problem are you trying to solve? — jonrsharpe
– jonrsharpe, Commented Jun 4, 2018 at 17:06
Well, sometimes instead of passing the id in the URL then retrieve the object from database by that id, I would try to pass a few properties of an object inside URL, like /edit/:id/:name/:zip/:phoneNumber -->(/edit/12/tommy/45402/9292412314), so this could save some time when loading the page to avoid calling via remote backend api. However, I don't want to expose these query value to the user directly so after encrypt these parameters and passing them into URL like (/edit/4a41/wlajsl/siea1ls7/asfeas) which user don't know what exactly contains in the url — Drex
– Drex, Commented Jun 4, 2018 at 22:16
For example, if query string contains SSN, it might be better to be encrypted — Drex
– Drex, Commented Jun 5, 2018 at 0:40
Why are you passing that in the URL to start with? Use a separate ID to identify users and pass private data like phone number and SSN via services if you need to. Encrypting in the URL isn't going to work because the decryption code will also be public. — jonrsharpe
– jonrsharpe, Commented Jun 5, 2018 at 7:26
You mean the decryption of Angular code will be public? Hmm, that is true, I am passing that in URL is for improving the performance, e.g, I have a pop-up only contains id, name and SSN field, so instead getting those fields data through a service via ID by going through database, I just grab those from my grid data and try to pass them into URL then mapping to my direction pop up model. — Drex
– Drex, Commented Jun 5, 2018 at 12:59

Drex · Accepted Answer · 2018-06-05 19:29:23Z

1

Like @jonrsharpe suggest, we can use eventEmiiter or subject through service to pass data as an object in between component so no need to work on hash query parameter in routing.

answered Jun 5, 2018 at 19:29

Drex

3,90110 gold badges47 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Bimal Das Over a year ago

But if I try to reload the same page, I will not work I think.

Collectives™ on Stack Overflow

Angular 5/6 project query parameter encryption

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related