Return information on currently logged user
Serialize users with abilities. Allow to have separated OpenAPI definition for users with and without abilities.
primary key for the record as UUID
Get custom attributes for the instance.
Return the session-bound CSRF token for the SPA to echo as X-CSRFToken.
With CSRF_USE_SESSIONS the secret lives in the session and is no longer exposed as a cookie, so the token is delivered here over the authenticated /users/me/ channel.
Instance permissions and capabilities