Express token authorization?

Question

JavaScript

How to get user data correctly?
I authorize the user, encrypt his id into a token and send it to the front, store the token in localstorage at the front and send it to headers when requesting back.
The question is what to do when the token comes to the back? I decrypt it, get the user id, then just get data by id, or do I need some other checks?

Answer 1

Are there any other checks needed?

Maximum checks are needed when receiving a request (for example, to protect against bots / scrapers)
And if you don’t care how the user uses the service on the front (with his own custom client or something) and how often the server will pull, then no more checks.
You made sure that the id / password are correct, so give him what he wants

Answer 2

Or are some other checks needed?

If you do not know if any other checks are needed, then they are not needed.