Scope
This section documents non-admin auth and onboarding behavior for:- session and authentication checks
- native mobile session exchange (
POST /api/mobile/exchange) - profile lifecycle and synchronization
- onboarding completion and points enrollment
Subsections
Architecture
Core auth boundaries, data model, and service interactions.
Behavior
Route-level runtime behavior, outcomes, and caveats.