Authenticated Web Messaging: Get custom claims

Hello,

Due to security issues, we cannot use the exposed attributes like email, name, and sub to get the other user information.

  1. Is there a way to get the access token like querying it via data action?
  2. Sending it via Database.set is not an option due to security too. In this case, are there any other workarounds for this?