惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Stack Overflow Blog
Stack Overflow Blog
云风的 BLOG
云风的 BLOG
G
Google Developers Blog
J
Java Code Geeks
C
Check Point Blog
Last Week in AI
Last Week in AI
Microsoft Azure Blog
Microsoft Azure Blog
Blog — PlanetScale
Blog — PlanetScale
月光博客
月光博客
Vercel News
Vercel News
The GitHub Blog
The GitHub Blog
L
LangChain Blog
有赞技术团队
有赞技术团队
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
博客园 - 司徒正美
IT之家
IT之家
Martin Fowler
Martin Fowler
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
T
Tailwind CSS Blog
U
Unit 42
Jina AI
Jina AI
Microsoft Security Blog
Microsoft Security Blog
I
InfoQ

Clerk Blog

Going to production with Clerk Deploy Clerk Init: The fastest way to start a new project Introducing Clerk CLI Middleware-based route protection bypass Postmortem: Clerk System Outage (March 10, 2026) Clerk for the AI era Add API Key support to your SaaS in minutes Postmortem: Clerk System Outage (February 19, 2026) Using Clerk in a React Native app Postmortem: DNS Provider Outage (February 10, 2026) How do I implement passkeys in Next.js? Clerk ranked #4 fastest-growing software vendor on Ramp’s December 2025 list How do I handle JWT verification in Next.js? Committing to Agent Identity: Clerk raises $50m Series C from Menlo and Anthropic’s Anthology Fund What is the best way to handle authentication in Next.js App Router? Postmortem: Database Incident (September 14–18, 2025) How do I add authentication to a Next.js app? Introducing Free Trials in Clerk Billing Postmortem: August 28, 2025 - elevated API latency and errors Introducing Mosaic: Bring Your Brand to Every Authentication Flow Multi-tenant authentication: What you need to know (and how Clerk helps) What are the risks and challenges of multi-tenancy? Resilience in Practice: Regional Failover at Clerk Build a Cross-Platform B2B App with Clerk, Expo, and Supabase Highlights from the MiduDev/Clerk Hackathon Add multi-tenancy to an app built with Clerk, Lovable, and Supabase How to build an AI coding rules app with Clerk, Lovable, and Supabase How to Build Multi-Tenant Authentication with Clerk Choosing the right SaaS architecture: Multi-Tenant vs. Single-Tenant Postmortem: June 26, 2025 service outage
A guide to reading authenticated user data from Clerk
Alex Booker · 2024-08-15 · via Clerk Blog

Reading data about the authenticated user is a fundamental part of any application.

Whether you need to access the user's ID, username, contact information, or profile data, Clerk provides various methods to accomplish this depending on your runtime environment and application needs.

Options are great! But they can also make it challenging to decide which approach to take. I wrote this guide to explain the different methods and their appropriate use cases. This way, you can choose the most suitable and efficient option for your circumstances.

Methods to read authenticated user data

Below is a table summarizing the different approaches to read authenticated user data from Clerk.

Use it to understand your options at a glance or reference the next time you return to this page.

Read User Data Guide setup guide

Frontend API with useUser()

Clerk's Frontend API enables authenticated users to access their own data and perform actions specific to their account from a browser or native environment.

To access the authenticated user, you could call the /v1/me endpoint. However, the convenient option in Next.js is to invoke useUser(), which queries /v1/me under the hood.

useUser()

Certain Frontend API requests are rate-limited but /v1/me is not. This endpoint has no defined limit, making it practically unlimited.

Guidance

When to use Frontend API with useUser():

  • Call useUser() from a client component when you need to update the UI with information about the authenticated user.
  • Best-suited for when you need to dynamically update the UI in response to a client event. useUser() returns a User with a reload() function that makes it even easier to render the most up-to-date user information.
  • Also useful for loading user information on page load, though server-side rendering (SSR) may be preferred for this.

When to avoid:

  • useUser() won't work from a server environment and is therefore inappropriate for server-side-rendering user information.
  • Unsuitable for accessing user private metadata.
  • Avoid querying and sending user data from the frontend to the backend. Fetch and verify the data directly on the backend to ensure its integrity.

Backend API with currentUser()

Clerk's Backend API is designed to query user data from a server environment.

The currentUser() helper is used to access information about the currently authenticated user from server components, server actions, and other server-side code like so:

currentUser()

Guidance

When to use currentUser():

  • Call currentUser() from a Next.js server component, server action, API route handler, or other backend code where you require data about the authenticated user.
  • Suitable for accessing user private metadata.
  • A good option when you need to query potentially large attributes such as user.organizatons from a backend environment. Dynamic attributes like these are usually too big for custom session claims (session claims are the subject of the next section).
  • Suitable for accessing user data infrequently due to rate limits.

When to avoid:

  • Do not exceed 100 requests per 10 seconds. This limit applies to all Backend API requests made by your application. Exceeding this limit will result in a 429 Too Many Requests error and your application might not work properly.
  • Avoid querying and storing user data in your database. If a user updates their information via a Clerk component like <UserProfile />, your database won't be synchronized. Instead, store only the user ID and fetch the latest user data from Clerk as needed.

Session claims

Claims are pieces of information about the authenticated user. They're encoded in the Clerk session token and digitally signed to ensure the information is authentic.

Claims are accessible from frontend or backend environments, and since they don't require an API roundtrip, rate limits do not apply.

The user ID is included in the token by default. However, the user's username, contact information, and other attributes are not. To access this optional data, it's necessary to customize the session token with custom claims.

Read user ID

Below are two code examples demonstrating how to access the authenticated user's ID on the client and on the server with the useAuth() and auth() helpers respectively:

Set and read custom session claims

To customize session claims for your application, open the Clerk dashboard then click Sessions.

Look for the "Customize session token section" and press Edit.

Define a JSON structure that includes dynamic placeholders called shortcodes (remember to Save after). Clerk will replace these shortcodes with the actual values at runtime:

Claims

Read custom session claims from a backend environment with the same auth() helper and the returned sessionClaims property.

Custom session claims are technically accessible from frontend environments, but this is rarely needed, so the Next.js SDK doesn't provide a dedicated helper.

Guidance

When to use session claims:

  • Custom session claims are best suited for scenarios where you need to frequently access certain user attributes from the backend, but the Backend API rate limits would normally be prohibitive.
  • In either frontend or server environments, session claims are the most efficient way to access just the user ID. This eliminates the need for unnecessary API calls.

When to avoid:

  • The entire session token must not exceed 4KB due to browser cookie size limits. Use good judgment when including custom claims such as user.organizations, which can cause the token to exceed this limit and break your app. Only store essential, predictably-sized user data in the token, and occasionally fetch larger claims through separate Backend API calls.
  • Unsuitable for accessing user private metadata.
  • Do not use custom session claims in a frontend environment. It requires less configuration and code to use the Frontend API with useUser(), as described at the top of this guide.