Normally this goes via Java/Javascript, however I strongly advise against the Node.class api.It is too low-level, better to use things like the ValueMap api

You can do it even shorter:use(function() {var resolver = resource.getResourceResolver(); var userManager = resolver.adaptTo(Packages.org.apache.jackrabbit.api.security.user.UserManager); var auth = userManager.getAuthorizable(resolver.getUserID());var groups = auth.memberOf(); return {groups: group...

I would implement this in Java and return a Map to the Sightly component.Use the Page-api to call the right methods

You are right, I wouldn't know now where to look. Except my previous recommendation on closing the resourceresolver.Here an article on how to debug sessions, maybe that helps.https://helpx.adobe.com/experience-manager/kb/AnalyzeUnclosedSessions.html

I like your way/suggestion.I think the main reason why it is not used much is because this requires Java 8.

What is the code in this method getUniqueEndpoints(query.getResult());?

My first reaction would to close the session in a finally-block, this is not happening currently.

Ah cool! 

I would raise a support ticket for this.

I checked this, and you are right.This is because there is a unsatisfied reference (com.day.cq.mailer.MailService) in com.adobe.cq.account.api.AccountManagementService Let me see if these is a workarond for this.