added /login

Author: ElenaDiachenko

.env.example

@@ -1 +1,2 @@
-DB_HOST=
+DB_HOST=
+SECRET_KEY=

controllers/users/index.js

@@ -1,6 +1,7 @@
 const signup = require('./signup');
-
+const login = require('./login');
 
 module.exports = {
-    signup
-}
+  signup,
+  login,
+};

controllers/users/login.js

@@ -0,0 +1,35 @@
+const bcrypt = require('bcrypt');
+const jwt = require('jsonwebtoken');
+const { User } = require('../../models');
+const { createError } = require('../../utils');
+const { joiLoginSchema } = require('../../models/user');
+const { SECRET_KEY } = process.env;
+
+const login = async (req, res) => {
+  const { error } = joiLoginSchema.validate(req.body);
+  if (error) throw createError(400, error.message);
+
+  const { email, password } = req.body;
+  const user = await User.findOne({ email });
+
+  const comparePassword = bcrypt.compareSync(password, user.password);
+  if (!user || !comparePassword) {
+    throw createError(401, 'Email or password is wrong');
+  }
+
+  const payload = {
+    id: user._id,
+  };
+
+  const token = jwt.sign(payload, SECRET_KEY, { expiresIn: '1h' });
+
+  res.json({
+    status: 'success',
+    code: 200,
+    data: {
+      token,
+    },
+  });
+};
+
+module.exports = login;

controllers/users/signup.js

@@ -10,7 +10,7 @@ const signup = async (req, res) => {
   const { email, password, subscription } = req.body;
 
   const user = await User.findOne({ email });
-  if (user) throw createError(409, `Email in use`);
+  if (user) throw createError(409, `Email: '${email}' in use`);
 
   const hashPassword = bcrypt.hashSync(password, bcrypt.genSaltSync(10));
   const result = await User.create({

package-lock.json

@@ -15,6 +15,7 @@
     "dotenv": "^16.0.3",
     "express": "4.17.1",
     "joi": "^17.6.4",
+    "jsonwebtoken": "^8.5.1",
     "mongoose": "^6.7.1",
     "morgan": "1.10.0",
     "uuid": "^9.0.0"

package.json

@@ -5,5 +5,6 @@ const { validation, ctrlWrapper } = require('../../middlewares');
 const { joiSignupSchema, joiLoginSchema } = require('../../models/user');
 
 router.post('/signup', validation(joiSignupSchema), ctrlWrapper(ctrl.signup));
+router.post('/login', validation(joiLoginSchema), ctrlWrapper(ctrl.login));
 
 module.exports = router;