type

AuthSession

type AuthSession = core.AuthSession

A new bearer session, safe ID, typed user, and expiry.

Source ridu.go:43

IDstring: Non-secret session identifier.
Tokenstring: One-time opaque bearer credential returned when the session is created.
Collectionschema.CollectionSlug: Auth-enabled collection that owns User.
Userstore.Document: Current authenticated content document.
ExpiresAttime.Time: Absolute UTC expiry time.

Token is a bearer secret. Store it only in a secure HTTP-only cookie or equivalent secret store; protocol/session-list representations never expose it.