Builder6 Authentication | Builder6 认证系统

Overview | 概述

Builder6 uses a multi-format token system supporting JWT, cookie-based session tokens, and API keys. Authentication is handled by AuthService and enforced by NestJS guards (AuthGuard, AdminGuard) from @builder6/core.

Token Formats | Token 格式

The system accepts three token formats, extracted from Authorization header or cookies:

1. JWT Token (Bearer)

Authorization: Bearer <jwt>

JWT payload: { sub: userId, name, email, space: spaceId, profile }

2. Cookie-Based Session Token