Is it legal to have REST resource such as /currentUser in terms of RESTful and stateless?

Question

In terms of RESTful and stateless it\'s pretty legal to have resource like

/users/123

But, the question is: is it legal to have resource that omits user id and

Answer 1

It is OK as long as you use only the data from request (HTTP Headers in your case). In other words, this may work only for users that pass authentication.