request.auth

Also written: request.auth.uid

In security rules, the user who sent the request (taken from their ID token), or `null` if nobody is signed in. `request.auth.uid` is their uid.