# HR Auth – Database and collection

HR auth uses **only** the **admins** collection. People collection is not used.

| What | Value |
|------|--------|
| **Database** | Same as CRM (e.g. **IGF**) |
| **Collection** | **admins** |
| **Find by** | **email** |
| **Password** | bcrypt or legacy md5/plain |

## role_name → HR role

| role_name | HR role | Login |
|-----------|---------|--------|
| IGF Manager | manager | POST /api/login → /manager |
| IGF Staff | employee | POST /api/login → /employee |
| IGF SuperAdmin | superadmin | POST /api/admin/login → /admin/dashboard |

**Endpoints:** POST /api/login (Manager+Employee), POST /api/admin/login (SuperAdmin), GET /api/me (protected).