core_session

{“what”:“Unique session token string, the primary key.”,“why”:“Without it, a session cannot be referenced by its token, breaking session lookup.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.292846659+00:00”}

{“what”:“Integer ID of the authenticated user.”,“why”:“Without it, the session cannot be associated with a user, so authorization fails.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.322609527+00:00”}

{“what”:“Creation time of the session, with time zone.”,“why”:“Without it, session age cannot be computed, so expiry policies based on creation time are impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.345429536+00:00”}

{“what”:“Optional opaque token for CSRF protection.”,“why”:“Without it, requests cannot be validated against CSRF, leaving the session vulnerable to forged actions.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.362211490+00:00”}

{“what”:“Hashed session key, used to verify the session token.”,“why”:“Without it, the session token cannot be verified securely, so a stolen token would be usable directly.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.373854401+00:00”}

{“what”:“ID of the authentication identity used to log in, if any.”,“why”:“Without it, the authentication provider for the session is unknown, so multi-provider login cannot be distinguished.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.386794311+00:00”}

{“what”:“Optional timestamp when the session expires.”,“why”:“Without it, sessions do not expire, so stolen tokens remain valid forever.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:03:15.400860360+00:00”}