Authentication Setup

I'll set up JWT-based authentication for your project. Here's the implementation:

1. Install Dependencies

npm install jsonwebtoken bcryptjs express-validator

2. Auth Middleware

import jwt from 'jsonwebtoken';

export const authMiddleware = (req, res, next) => {
  const token = req.headers.authorization?.split(' ')[1];
  if (!token) return res.status(401).json({ error: 'No token' });
  
  try {
    const decoded = jwt.verify(token, process.env.JWT_SECRET);
    req.userId = decoded.id;
    next();
  } catch (err) {
    res.status(401).json({ error: 'Invalid token' });
  }
};

3. Login Endpoint

app.post('/api/auth/login', async (req, res) => {
  const { email, password } = req.body;
  const user = await User.findOne({ email });
  
  if (!user || !await bcrypt.compare(password, user.hash)) {
    return res.status(401).json({ error: 'Invalid credentials' });
  }
  
  const token = jwt.sign({ id: user.id }, process.env.JWT_SECRET, {
    expiresIn: '7d'
  });
  
  res.json({ token, user: { id: user.id, email } });
});

Files created: src/middleware/auth.ts, src/routes/auth.ts

The auth system is now ready. Protected routes can use the authMiddleware guard.