Get user info route

[jackheuberger]

FEATURE REQUEST

What do you want to happen

Based on a user's login id (from supertokens & prisma schema), fetch their information from the database

Anything else we need to know?

I'm not 100% sure how to do this "safely". From the sample supertokens HomeView.vue:

    async getUserInfo() {
      this.session = await Session.doesSessionExist();
      if (this.session) {
        this.userId = await Session.getUserId();
      }
    }

Is this "enough" to be safe? Could someone maliciously edit a session? The thing we want to prevent is someone passing in a userid that isn't their own to get other peoples' data.

[jackheuberger]

This is probably close to what we want: https://supertokens.com/docs/passwordless/common-customizations/sessions/session-verification-in-api/verify-session