title: Is it safe to send user id to front end in plain text?
body: <p>I have an express app with MongoDB. It creates a user id for each user document. This user id also get encoded in jwt, which creates an illusion for new devs that user id must not be sent to front end in plain text form.</p>
  <p>Can someone explain how sending user id to front end can create security issues? As much as i know hackers can't create a jwt with it without my secret string. Neither my express app listens for this user id anywhere in backend. But its critical for frontend as it is being used as seller Id.</p>