http requests and http only cookies

The only issue is the sites will be crossed domain

Hence possibilty of csrf attack

Would need to use some anti csrf token along with content policy to prevent xss

But i mean more on a how can i get the user on the frontend, like by creating some hook or contexts? And if it is possible to get the im server components

you can get the cookie in server component, send that over to your server to get user info

Should i just make a function or is there something else even better?

sure, make a function to abstract away the logic

Yeah, but im tring to add a callback url cookie too, but i can't edit cookies in server components