How to get retool user id?

💬 Account & User Management
5

Thanks, and thanks to everyone else.

I'll add a few things that could help if you're thinking of using this data for secure use-cases:

  1. Using current_user.sid rather than id would seem to add a decent bit of additional security. Whereas id is an int that obviously can be easily guessed by an attacker, sid is a unique string.
  2. In Settings -> Beta make sure to check "Prevent query variable spoofing" I think this feature was added in response to my question Is the current_user global secure? (Note to Retool -- this should be out of Beta, it's an important piece of security)

Along with IP whitelisting and of course users' needing to log in to Retool, hopefully this all creates some basic decent auth.