do not ask for user id, it comes from auth anyway

src/API.hs

@@ -33,8 +33,7 @@ type MateAPI =
     :> ReqBody '[JSON] Int :> Delete '[JSON] ()
 
   :<|> "user" :> ReqBody '[JSON] UserSubmit :> Post '[JSON] Int
-  :<|> "user" :> AuthProtect "header-auth"
-    :> Capture "uid'" Int :> Get '[JSON] UserDetails
+  :<|> "user" :> AuthProtect "header-auth" :> Get '[JSON] UserDetails
   :<|> "user" :> AuthProtect "header-auth"
     :> ReqBody '[JSON] UserDetailsSubmit :> Patch '[JSON] ()
   :<|> "user" :> "list" :> QueryParam "refine" UserRefine :> Get '[JSON] [UserSummary]

src/Control/User.hs

@@ -32,21 +32,14 @@ userNew (UserSubmit ident email passhash) = do
 
 userGet
   :: Maybe (Int, AuthMethod)
-  -> Int
   -> MateHandler UserDetails
-userGet Nothing _ =
+userGet Nothing =
   throwError $ err401
     { errBody = "No Authentication present."
     }
-userGet (Just (aid, method)) uid =
-  if aid == uid && any (== method) [PrimaryPass, ChallengeResponse]
-  then do
+userGet (Just (uid, _)) = do
   conn <- rsConnection <$> ask
   userDetailsSelect uid conn
-  else
-    throwError $ err401
-      { errBody = "Wrong Authentication present."
-      }
 
 userUpdate
   :: Maybe (Int, AuthMethod)