Can I use the "sub" from a claim to store as the unique user id in the database?

Questions
1

Hi,

I am creating an SPA(Angular 10) that would get the access token from OKTA using Okat-Auth-JS, as we want to use Material login form.

We then want to save the user data received after logging into the database.
We’re using Couchbase and we need a unique identifier to be used to create the document key stored in the db.

My question is, would it be a good practice to use the “sub” from the claims to achieve this, or is it good practice to store the value of “sub” in the database.

Request you to please help me out with it.

2

the ID token sub claim is hard-coded to always contain the okta user id and it can safely be used for storing a list of ids tied to each user accessing the Angular app

3

@Fuzzard ,

Thank you for responding.

Just to double check that I’m getting it right, storing the “sub” in DB and using it as the userId throughout the application(SPA, multiple microservices) is acceptable and is not a security hazard?

4

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.