$ mnemo recall "how did we handle auth?"
searching: "how did we handle auth?"...
synthesizing from 4 memories...
mnemo recall — "how did we handle auth?"
Auth lives in /lib/auth.ts [4]. You chose JWT over sessions [1]
because the API needs to be stateless for horizontal scaling.
Refresh tokens are stored in Redis — you tried httpOnly cookies
first [2] but abandoned it due to CORS issues with the mobile
client. Access tokens expire in 15 min [3].
4 memories · project: api-service · branch: main
$