I updated my user name on Duolingo and noticed that their API endpoints (example below) are not different depending on if you’re viewing another users profile, or viewing/editing your own.

https://www.duolingo.com/2017-06-30/users/{USER ID}?fields=email

My question is, is this best practice? Also, if so, in order to do this, don’t they need to have the current logged in users ID already stored in the frontend before any subsequent requests are issued?