exampleAuthorization.js

read_a_user = function(req, res) {
  var userId = [req.params.id];
  
  // decodedToken is gotten by jwt.verify(token, config.secretForJWT);
  // assume the original object that was passed when creating the user had an id
  if (req.decodedToken.id === userId) {
    // get the user and do anything else needed
  }
};