Oh, no no, there is nothing at all illegitimate about this request; not at all.   I have an intranet of users who will be linking to this (Internet available) application, and I know that every one of them will have logged in under their own accounts, and it would be convenient for me to ascertain what that account is.

Mind you, I do not have to “trust” what I am told, but it would save a couple steps if the app could be a little bit “clever” and “pro-active” and “just magically know” who this user appears to be.   But I can’t do it with any browser-specific assumptions or rely upon browser specific (“i.e. IE” ... ahem) fee-churs.

And, if I can’t do it, then, well, “okay, I can’t do it.   Sux, but not the end of the world.”