Been curious about a secure way to check if the current route of /username is the current sessions profile, and if so it would conditionally let the owner edit their profile. What is the correct way to securely compare if the profile user and session user are the same?

To me, it seems like just comparing profile user ID or username to session ID or username is not effective.

Advice would be appreciated