feat: implement user registration and login authentication routes with JWT authentication

backend/package.json

@@ -7,7 +7,10 @@
     "dev": "nodemon src/server.js"
   },
   "dependencies": {
+    "bcrypt": "^6.0.0",
+    "dotenv": "^17.2.3",
     "express": "^4.18.2",
+    "jsonwebtoken": "^9.0.2",
     "mongoose": "^6.9.1",
     "nodemailer": "^6.9.4",
     "winston": "^3.8.2"

backend/src/controllers/userController.js

@@ -1,16 +1,56 @@
-const User = require('../models/User');
+const bcrypt = require("bcrypt");
+const jwt = require("jsonwebtoken");
+const User = require("../models/User");
+require('dotenv').config();
+
 
 exports.register = async (req, res) => {
   try {
     const { name, email, password } = req.body;
-    const user = await User.create({ name, email, password });
-    res.status(201).json({ success: true, data: user });
+    const existingUser = await User.findOne({ email });
+    if (existingUser) {
+      return res.status(400).json({ success: false, message: "User already exists" });
+    }
+    const hashedPassword = await bcrypt.hash(password, 10);
+    const user = await User.create({ name, email, password: hashedPassword });
+
+    res.status(201).json({
+      success: true,
+      message: "User registered successfully",
+      data: { id: user._id, name: user.name, email: user.email },
+    });
   } catch (err) {
     res.status(400).json({ success: false, error: err.message });
   }
 };
 
 exports.login = async (req, res) => {
-  // placeholder implementation
-  res.json({ success: true, message: 'login endpoint' });
+  try {
+    const { email, password } = req.body;
+
+    const user = await User.findOne({ email });
+    if (!user) {
+      return res.status(401).json({ success: false, message: "Invalid email or password" });
+    }
+
+    const isMatch = await bcrypt.compare(password, user.password);
+    if (!isMatch) {
+      return res.status(401).json({ success: false, message: "Invalid email or password" });
+    }
+
+    const token = jwt.sign(
+      { id: user._id, email: user.email },
+      process.env.JWT_SECRET,
+      { expiresIn: "1d" }
+    );
+
+    res.status(200).json({
+      success: true,
+      message: "Login successful",
+      token,
+      user: { id: user._id, name: user.name, email: user.email },
+    });
+  } catch (err) {
+    res.status(400).json({ success: false, error: err.message });
+  }
 };

backend/src/server.js

@@ -1,17 +1,23 @@
+require('dotenv').config();
+
 const express = require('express');
 const connectDB = require('./config/db');
 const userRoutes = require('./routes/userRoutes');
 
 const app = express();
 app.use(express.json());
 
-app.use('/api/users', userRoutes);
+app.use('/api/auth', userRoutes);
 
 const PORT = process.env.PORT || 5000;
 
 const start = async () => {
-  await connectDB();
-  app.listen(PORT, () => console.log(`Server running on port ${PORT}`));
+  try {
+    await connectDB();
+    app.listen(PORT, () => console.log(`Server running on port ${PORT}`));
+  } catch (err) {
+    console.error('Failed to start server:', err.message);
+  }
 };
 
 start();