feat(website): add GET /users/me endpoint for authenticated user lookup

backend/src/main/kotlin/org/genspectrum/dashboardsbackend/controller/UsersController.kt

@@ -10,6 +10,7 @@ import org.springframework.web.bind.annotation.GetMapping
 import org.springframework.web.bind.annotation.PathVariable
 import org.springframework.web.bind.annotation.PostMapping
 import org.springframework.web.bind.annotation.RequestBody
+import org.springframework.web.bind.annotation.RequestParam
 import org.springframework.web.bind.annotation.RestController
 
 @RestController
@@ -21,6 +22,13 @@ class UsersController(private val userModel: UserModel) {
     )
     fun syncUser(@RequestBody request: UserSyncRequest): User = userModel.syncUser(request)
 
+    @GetMapping("/users/me", produces = [MediaType.APPLICATION_JSON_VALUE])
+    @Operation(
+        summary = "Get the authenticated user",
+        description = "Returns public info for the currently authenticated user, resolved from the session or API key.",
+    )
+    fun getMe(@RequestParam userId: Long): PublicUser = userModel.getUser(userId)
+
     @GetMapping("/users/{id}", produces = [MediaType.APPLICATION_JSON_VALUE])
     @Operation(
         summary = "Get user by internal ID",

backend/src/test/kotlin/org/genspectrum/dashboardsbackend/controller/UsersClient.kt

@@ -31,6 +31,12 @@ class UsersClient(private val mockMvc: MockMvc, private val objectMapper: Object
         getUserRaw(id).andExpect(status().isOk),
     )
 
+    fun getMeRaw(userId: Long): ResultActions = mockMvc.perform(get("/users/me").param("userId", userId.toString()))
+
+    fun getMe(userId: Long): PublicUser = deserializeJsonResponse(
+        getMeRaw(userId).andExpect(status().isOk),
+    )
+
     /** Creates a user with a random GitHub ID and returns the internal Long user ID. */
     fun createUser(): Long = syncUser(
         UserSyncRequest(

backend/src/test/kotlin/org/genspectrum/dashboardsbackend/controller/UsersControllerTest.kt

@@ -80,6 +80,25 @@ class UsersControllerTest(@param:Autowired private val usersClient: UsersClient)
             .andExpect(jsonPath("$.detail").value("User 999999999 not found"))
     }
 
+    @Test
+    fun `WHEN getting me THEN returns own public user info`() {
+        val created = usersClient.syncUser(
+            UserSyncRequest(githubId = UUID.randomUUID().toString(), name = "Eve", email = null),
+        )
+
+        val me = usersClient.getMe(created.id)
+
+        assertThat(me.id, equalTo(created.id))
+        assertThat(me.name, equalTo("Eve"))
+    }
+
+    @Test
+    fun `WHEN getting me with nonexistent user ID THEN returns 404`() {
+        usersClient.getMeRaw(999999999L)
+            .andExpect(status().isNotFound)
+            .andExpect(jsonPath("$.detail").value("User 999999999 not found"))
+    }
+
     @Test
     fun `WHEN syncing two different github IDs THEN they get different internal IDs`() {
         val first = usersClient.syncUser(

website/src/backendApi/backendService.ts

@@ -173,6 +173,10 @@ export class BackendService extends ApiService {
         });
     }
 
+    public async getMe() {
+        return this.get({ url: '/users/me', schema: publicUserSchema });
+    }
+
     public async getUser({ id }: { id: number }) {
         return this.get({ url: `/users/${id}`, schema: publicUserSchema });
     }

website/src/pages/api/users/me.ts

@@ -0,0 +1,3 @@
+import { proxyToBackend } from '../../../backendApi/backendProxy.ts';
+
+export const GET = proxyToBackend;