Files
dashback/docs/api/routes/auth/me.md
seb fc2b136c46 Store Google avatar bytes and slim the session JWT to id only.
Download profile images on login into picturebinary, return them as base64 from /auth/me, and resolve sessions via getById.
2026-08-05 11:12:36 +02:00

648 B

GET /auth/me

Protected. Requires a valid session cookie (credentials: 'include').

Current user

Returns the authenticated user from the session cookie and the Google client ID. user.picture is the stored profile image as a base64 string when present. Unauthenticated calls still receive googleClientId with 401.

Response 200

Authenticated

{
  "user": { … },
  "googleClientId": "…"
}

Errors

Status Description
401 Unauthorized — still includes googleClientId for the frontend

Generated from @openapi JSDoc. Do not edit by hand — run npm run docs:api.