mongodb - Is it ok to turn the mongo ObjectId into a string and use it for URLs? -

document/show?id=4cf8ce8a8aad6957ff00005b 

generally think should cautious expose internals (such db ids) client. url can manipulated , user has possibly access objects don't want him have.

for mongodb in special, object id might reveal additional internals (see here), i.e. aren't random. might issue too.

besides that, think there's no reason not use id.