Fastest way to check whether the user is admin from app backend

[kkercz]

Jira should be sending JWT tokens whenever your app is invoked from the UI. You just need to verify the token’s signature to know if the request comes from Jira. See Security for Connect apps