This shell stores only the minimum session and account state needed to authenticate a user into the Girret ecosystem.
1. Account data
Username, password hash, encrypted password display data, Telegram link data, temporary confirmation codes, and session records may be processed by the Girret ID worker to provide registration, login, logout, account settings, and Telegram-based two-factor authentication setup.
2. Sessions
Authenticated sessions are maintained with a secure cookie. Logging out removes the current session from the server side. Telegram confirmation codes are temporary and expire after 5 minutes.