How to solve the issue of assigning a device to a user

[Luke]

Uplink security question: sending sensitive data using a callable name

I have a question about the security of sending sensitive data using a callable name. Use case: Multi-user application. Users must log in to use the application. After logging in, they can add any number of devices, and a unique key is generated for each device. This unique key must be entered on the device (Raspberry Pico) in order to be able to operate it using the application. Each user sees/operates only their devices via callable name: DEVICE_UNIQUE_KEY = 'abc123' @anvil.pico.callable('…