Files
dashback/docs/api/routes/auth/me.md
seb fc2b136c46 Store Google avatar bytes and slim the session JWT to id only.
Download profile images on login into picturebinary, return them as base64 from /auth/me, and resolve sessions via getById.
2026-08-05 11:12:36 +02:00

32 lines
648 B
Markdown

# `GET /auth/me`
Protected. Requires a valid session cookie (`credentials: 'include'`).
Current user
Returns the authenticated user from the session cookie and the Google client ID.
`user.picture` is the stored profile image as a base64 string when present.
Unauthenticated calls still receive `googleClientId` with 401.
## Response `200`
Authenticated
```json
{
"user": { … },
"googleClientId": "…"
}
```
## Errors
| Status | Description |
|--------|-------------|
| 401 | Unauthorized — still includes `googleClientId` for the frontend |
---
_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._