So u don’t even need an API like /user/:userId (unless u want users to see other user’s info based on their userId).