type

AuthSession

type AuthSession struct {
	// ID is the non-secret identifier used to manage this session.
	ID string
	// Token is the opaque credential accepted by session-aware transports.
	Token string
	// Collection is the auth-enabled collection that owns the identity.
	Collection schema.CollectionSlug
	// User is the current document from Collection.
	User store.Document
	// ExpiresAt is the absolute UTC expiry time.
	ExpiresAt time.Time
}

A newly authenticated session and its one-time raw token.

Source core/auth.go:22

IDstring: Non-secret session identifier.
Tokenstring: One-time opaque bearer credential returned when the session is created.
Collectionschema.CollectionSlug: Auth-enabled collection that owns User.
Userstore.Document: Current authenticated content document.
ExpiresAttime.Time: Absolute UTC expiry time.

Token is a bearer secret. Store it only in a secure HTTP-only cookie or equivalent secret store; protocol/session-list representations never expose it.