model

type AppPassword struct {
	ID         uint       `gorm:"primaryKey"`
	UserID     string     `gorm:"size:64;index;not null"`       // opaque user id
	TokenHash  []byte     `gorm:"uniqueIndex;size:32;not null"` // SHA256(token)
	Label      string     `gorm:"size:255"`
	ScopeJSON  []byte     // JSON-encoded map[string]*auth.Scope
	Ctime      time.Time  `gorm:"not null"`
	Utime      time.Time  `gorm:"not null"` // last seen; buffered write
	Expiration *time.Time // nil = never expires
}