Attaching user-id header to axios interceptor in middleware (is it safe) about express HOT 1 CLOSED

If this service is a service you own and trust maybe, but in general this type of thing is likely to be a big security mess when you trust the header and someone figures out they can pretend to be other users. There is a reason folks use sessions and secure id's and things like JWTs. If you are rolling this yourself and unsure, then you are almost certainly going to make a mistake. If this is business critical I suggest working with an expert.

That said, despite maybe being capable of answering these questions the issue tracker here is not for technical support. Especially on app design and code for configuring axios which is not something this project owns (or personally I would even recommend). I know @UlisesGascon marked this as help wanted but even if we have triager's who want to help on this it is not a valid issue for the issue tracker. I would suggest reaching out on reddit or stack overflow or somewhere with folks volunteering time to help with questions like this.

from express.