helpelf_getuser

getuser.js

import * as admin from "firebase-admin";
import User from "../models/user";
import express from "express";

var router = express.Router();
...

router.post(
  "/getuser",
  [],
  asyncHandler(async (request, response, next) => {
    let firebaseUserId;
    
    try {
      const decodedToken = await admin.auth().verifyIdToken(request.body.idToken);
      firebaseUserId = decodedToken.uid;
    } catch (error) {
      return response.status(400).send(error);
    }

    let user = await getUserFromFirebaseId(firebaseUserId); // this is now a spoofed user if the requesting user was an admin with a spoofUserId set

    if (!user) {
      response.status(400).send("Invalid user");
    }

    return response.status(200).send({});
  })
);