A responder wrapped in an authentication realm may access the currently logged-in user,

as well as the logged-in username:
username ( -- string/f )

Values can also be stored in user profile variables:
uget ( key -- value )

uset ( value key -- )

uchange ( quot key -- )

User profile variables have the same restrictions on their values as session variables; see Session state serialization for a discussion.