u

docs/api/routes/auth/me.md

@@ -1,19 +1,28 @@
 # `GET /auth/me`
 
-Protected. Requires a valid session cookie. Every response includes `googleClientId`.
+Protected. Requires a valid session cookie (`credentials: 'include'`).
 
-**200**
+Current user
+
+Returns the authenticated user from the session cookie and the Google client ID. Unauthenticated calls still receive `googleClientId` with 401.
+
+## Response `200`
+
+Authenticated
 
 ```json
 {
-  "user": { "id": 1, "email": "you@example.com", "picture": "https://lh3.googleusercontent.com/..." },
-  "googleClientId": "your-client-id.apps.googleusercontent.com"
+  "user": { … },
+  "googleClientId": "…"
 }
 ```
 
-**Errors**
+## Errors
 
-| Status | Body |
-|--------|------|
-| 401 | `{ "error": "Unauthorized", "googleClientId": "..." }` or `{ "error": "Invalid token", "googleClientId": "..." }` |
-| 403 | `{ "error": "User is no longer authorized", "googleClientId": "..." }` |
+| Status | Description |
+|--------|-------------|
+| 401 | Unauthorized — still includes `googleClientId` for the frontend |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._