Add JWT authentication routes + controller | Schema updates needed

backend/cloudConfig.js

@@ -0,0 +1,20 @@
+const cloudinary = require('cloudinary').v2;
+const { CloudinaryStorage } = require('multer-storage-cloudinary');
+
+cloudinary.config({
+    cloud_name:process.env.CLOUD_NAME,
+    api_key:process.env.CLOUD_API_KEY,
+    api_secret:process.env.CLOUD_API_SECRET
+});
+
+const storage = new CloudinaryStorage({
+  cloudinary: cloudinary,
+  params: {
+    folder: 'pg-finder',
+    allowed_Format:["png" , "jpeg" , "jpg"],
+  },
+});
+
+module.exports = {
+    cloudinary , storage
+}

backend/controllers/authController.js

@@ -0,0 +1,87 @@
+const User = require("../models/user.model"); 
+const jwt = require("jsonwebtoken");
+const bcrypt = require("bcryptjs");
+
+exports.register = async (req, res) => {
+    try {
+        const { name, email, password, role } = req.body;
+
+        if (!name || !email || !password) {
+            return res.status(400).json({ message: 'Please provide all required fields' });
+        }
+
+        const existingUser = await User.findOne({ email });
+        if (existingUser) {
+            return res.status(400).json({ message: 'User already exists' });
+        }
+
+        const hashedPassword = await bcrypt.hash(password, 10);
+        const newUser = new User({ 
+            name,
+            email,
+            password: hashedPassword,
+            role: role || 'user' 
+        });
+
+        await newUser.save();  
+
+        const token = jwt.sign(
+            { id: newUser._id, role: newUser.role },
+            process.env.JWT_SECRET,
+            { expiresIn: '7d' }
+        );
+
+        res.status(201).json({
+            token,
+            user: {
+                id: newUser._id,
+                name: newUser.name,
+                email: newUser.email,
+                role: newUser.role,
+            }
+        });
+    } catch (err) {
+        console.error(err);
+        res.status(500).json({ message: 'Server error', error: err.message });
+    }
+};
+
+exports.login = async (req, res) => {
+    try {
+        const { email, password } = req.body;
+
+        if (!email || !password) {
+            return res.status(400).json({ message: 'Please provide email and password' });
+        }
+
+        const user = await User.findOne({ email });
+        if (!user) {
+            return res.status(400).json({ message: 'Invalid credentials' });
+        }
+
+        const isMatch = await bcrypt.compare(password, user.password); 
+        if (!isMatch) {
+            return res.status(400).json({ message: 'Invalid credentials' });
+        }
+
+        const token = jwt.sign(
+            { id: user._id, role: user.role },
+            process.env.JWT_SECRET,
+            { expiresIn: '7d' }
+        );
+
+        res.json({
+            token,
+            user: {
+                id: user._id,
+                name: user.name,
+                email: user.email,
+                role: user.role,
+            }
+        });
+
+    } catch (err) {
+        console.error(err); 
+        res.status(500).json({ message: 'Server error', error: err.message });
+    }
+};

backend/middleware/authMiddleware.js

@@ -3,7 +3,7 @@ import jwt from 'jsonwebtoken';
 
 dotenv.config();
 
-const authMiddleware=(req,res,next)=>{
+exports.verifyToken = (req,res,next) => {
     const authHeader=req.headers.authorization;
     if(!authHeader || !authHeader.startsWith('Bearer ')){
         return res.status(403).json({
@@ -20,5 +20,14 @@ const authMiddleware=(req,res,next)=>{
             msg:"Forbidden request"
         })
     }
-}
-export default authMiddleware;
+};
+
+// For role-based access (e.g., admin only)
+exports.requireRole = (role) => {
+  return (req, res, next) => {
+    if (req.user.role !== role) {
+      return res.status(403).json({ message: 'Access denied' });
+    }
+    next();
+  };
+};

backend/package.json

@@ -12,6 +12,7 @@
   "license": "ISC",
   "type": "module",
   "dependencies": {
+    "bcryptjs": "^3.0.2",
     "cors": "^2.8.5",
     "dotenv": "^16.5.0",
     "express": "^5.1.0",

backend/routes/authRoutes.js

@@ -0,0 +1,11 @@
+const express = require("express");
+const router = express.Router();
+const { register, login } = require("../controllers/authController");
+
+// POST /api/auth/register
+router.post('/register', register);
+
+// POST /api/auth/login
+router.post('/login', login);
+
+module.exports = router;

backend/routes/pg.routes.js

@@ -1,6 +1,8 @@
 import express from 'express';
 import { Pg } from '../config/db.js';
-
+const {storage} = require('../cloudConfig.js');
+const multer = require('multer');
+const upload = multer({storage});
 const router = express.Router();
 
 

backend/server.js

@@ -6,6 +6,7 @@ import mainRouter from "./routes/index.js"
 dotenv.config();
 const app = express();
 const PORT = process.env.PORT || 5000;
+const authRouter = require("./routes/authRoutes.js");
 
 app.use(cors());
 app.use(express.json());
@@ -17,6 +18,8 @@ app.get('/', (req, res) => {
     res.send('Hello from the backend!');
 });
 
+app.use('/api/auth' , authRouter);
+
 // Start the server
 app.listen(PORT, () => {
     console.log(`Server is running on http://localhost:${PORT}`);