How can I get the user or servicecontext from a connected system plugin's clientApi?

I am trying to return a document to a component plugin via a connected system plugin's clientApi.  However, I have not been able to find a secure way to retrieve the user in order to do so.  Is there a way to get the user from the session server-side?