# `GET /auth/me`

Protected. Requires a valid session cookie. Every response includes `googleClientId`.

**200**

```json
{
  "user": { "id": 1, "email": "you@example.com", "picture": "https://lh3.googleusercontent.com/..." },
  "googleClientId": "your-client-id.apps.googleusercontent.com"
}
```

**Errors**

| Status | Body |
|--------|------|
| 401 | `{ "error": "Unauthorized", "googleClientId": "..." }` or `{ "error": "Invalid token", "googleClientId": "..." }` |
| 403 | `{ "error": "User is no longer authorized", "googleClientId": "..." }` |