# `GET /auth/me`

Protected. Requires a valid session cookie (`credentials: 'include'`).

Current user

Returns the authenticated user from the session cookie and the Google client ID.
`user.picture` is the stored profile image as a base64 string when present.
Unauthenticated calls still receive `googleClientId` with 401.


## Response `200`

Authenticated

```json
{
  "user": { … },
  "googleClientId": "…"
}
```

## Errors

| Status | Description |
|--------|-------------|
| 401 | Unauthorized — still includes `googleClientId` for the frontend |

---

_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._