Get profile of other user client side

[tyf]

Hi there @thijsfranck welcome to the community!

@thijsfranck

Should I set up a pass-through API which authorizes users based on their app JWT token? Or should I be looking at a different approach (the fact that this API requires a management token seems to suggest so)?

You’re correct in that the /users endpoint requires a management API token - Typically, this type of request is proxied through a backend that can management client credentials safely. The following FAQ is along the lines of what proxying through a backend will look like:

How can I enable users to change their email address from a SPA or native app?

Question: How can I enable users to change their email address from a SPA or native app? Answer: Public clients (like SPAs and native applications) are restricted from requesting tokens for the management API with the proper scopes for updating a user’s email. These types of applications are limited to a few specific scopes. Because of these limitations, email change requests from public clients must flow through a backend or proxy API. This could be a serverless function with the sole purpose…

Hope this helps!