docs: finalize demo session persistence

This commit is contained in:
2026-08-20 17:21:25 +03:30
parent 384ea54282
commit 50030a20e8
3 changed files with 22 additions and 11 deletions

View File

@@ -36,7 +36,7 @@ Switch response codes remain nullable text on attempts until an authoritative de
| `merchants` | Merchant profile and category membership | unique source merchant key; FK category |
| `terminals` | Merchant-owned payment terminals | unique source terminal key; FK merchant |
| `merchant_users` | Login identities | unique normalized username; FK merchant; password hash only |
| `auth_sessions` | Revocable authenticated sessions | hashed opaque session token; FK user; expiry/revocation |
| `auth_sessions` | Revocable demo authenticated sessions | unique SHA-256 digest of a 32-byte opaque token; FK user; last activity; idle/absolute expiry; revocation |
Synthetic profile fields carry an explicit `profile_is_synthetic` marker. Credentials are generated outside Git.