Skip to Content
Routes (HTTP URLs)auth.route.ts

auth.route.ts

Prefix: /api/v1/auth

This is the login desk. Users prove who they are with Google; we give back tokens.

Main endpoints (conceptual)

MethodPathWhoWhat happens
POST/googleMobile / extensionBody: { idToken } → verify Google → user row → access + refresh tokens in JSON
POST/google/codeWebOAuth code + redirectUri → same outcome + refresh in HttpOnly cookie
POST/refreshAllNew access token (cookie or body refresh token)
POST/logoutAllRevoke refresh token
GET/meLogged-inauthMiddleware → current user DTO

Web vs mobile difference

  • Web stores refresh token in cookie yt_refreshToken on path /api/v1/auth.
  • Flutter / extension get refreshToken in JSON (no cookie dependency).

Services used

  • GoogleService — verify id token or exchange OAuth code
  • TokenService — JWT access + refresh rotation
  • User model — find or create user
  • toUserDTO — safe JSON for clients

Open auth.route.ts in the repo for exact paths and error messages.

Last updated on
Overviewuser.route.ts