Hey folks I have an architectural based question for my web app. I am using Google auth and have successfully written code to implement this. I am able to access the name of the person coming to the page.

Question - Is it right to use the first name and last name of the person coming from the gAuth Json to give access to data on the web app. This is how I have implemented it currently. Using the first name and last name of the record, I am scanning the mongo collection. Once I get the hit, I am redirecting the user to specific role based pages.

Is this architecturally the right thing to do is my question ?