User & auth models
| File | Collection purpose |
|---|---|
user.model.ts | Account: email, Google id, admin flags, onboarding |
refresh-token.model.ts | Hashed refresh tokens per device/session |
user.model.ts (baby)
Stores who someone is:
email,name,avatargoogleId— link to Google accountisAdmin,adminRole— staff access (permissions)isOnboarded— finished first-time setup?
Auth middleware loads this row on every request.
refresh-token.model.ts (baby)
Long-lived login sessions. Raw token never stored plain — hashed with REFRESH_TOKEN_SECRET.
TokenService creates, rotates, revokes rows here.
Last updated on