type
AuthSession
A new bearer session, safe ID, typed user, and expiry.
Properties
| Property | Type | Description |
|---|---|---|
ID | string | Non-secret session identifier. |
Token | string | One-time opaque bearer credential returned when the session is created. |
Collection | schema.CollectionSlug | Auth-enabled collection that owns User. |
User | store.Document | Current authenticated content document. |
ExpiresAt | time.Time | Absolute UTC expiry time. |
How it works
Token is a bearer secret. Store it only in a secure HTTP-only cookie or equivalent secret store; protocol/session-list representations never expose it.