adding and changing files

Author: cory

authMid.js

@@ -0,0 +1,31 @@
+const jwt = require('jsonwebtoken');
+
+// Middleware for generating JWT
+const generateToken = (user) => {
+    return jwt.sign({ email: user.email }, 'your_secret_key', { expiresIn: '1h' }); // Token expires in 1 hour
+};
+
+// Middleware for verifying JWT
+const verifyToken = (req, res, next) => {
+    const token = req.headers.authorization;
+
+    if (!token) {
+        return res.status(401).json({ message: 'No token provided' });
+    }
+
+    jwt.verify(token, 'your_secret_key', (err, decoded) => {
+        if (err) {
+            return res.status(401).json({ message: 'Invalid token' });
+        }
+
+        const currentTime = Math.floor(Date.now() / 1000); // Current time in seconds
+        if (decoded.exp <= currentTime) {
+            return res.status(401).json({ message: 'Token expired' });
+        }
+        // Attach decoded user information to the request object for further processing
+        req.user = decoded;
+        next();
+    });
+};
+
+module.exports = { generateToken, verifyToken };

index.js

@@ -2,7 +2,7 @@ var express = require('express');
 var app     = express();
 var cors    = require('cors');
 var dal     = require('./dal.js');
-const e = require('express');
+const { generateToken, verifyToken } = require('./authMid.js');
 
 // used to serve static files from public directory
 app.use(express.static('public'));
@@ -35,28 +35,27 @@ app.get('/account/create/:name/:email/:password', function (req, res) {
 
 // login user 
 app.get('/account/login/:email/:password', function (req, res) {
-
-    dal.find(req.params.email).
-        then((user) => {
-
-            // if user exists, check password
-            if(user.length > 0){
-                if (user[0].password === req.params.password){
-                    res.send(user[0]);
-                }
-                else{
-                    res.send('Login failed: wrong password');
+    dal.find(req.params.email)
+        .then((user) => {
+            if (user.length > 0) {
+                if (user[0].password === req.params.password) {
+                    const token = generateToken({ email: req.params.email });
+                    res.json({ user: user[0], token }); // Send user and token upon successful login
+                } else {
+                    res.status(401).send('Login failed: wrong password');
                 }
+            } else {
+                res.status(404).send('Login failed: user not found');
             }
-            else{
-                res.send('Login failed: user not found');
-            }
-    });
-    
+        })
+        .catch((error) => {
+            console.error('Error:', error);
+            res.status(500).send('An error occurred while logging in');
+        });
 });
 
 // find user account
-app.get('/account/find/:email', function (req, res) {
+app.get('/account/find/:email', verifyToken, function (req, res) {
 
     dal.find(req.params.email).
         then((user) => {
@@ -66,7 +65,7 @@ app.get('/account/find/:email', function (req, res) {
 });
 
 // find one user by email - alternative to find
-app.get('/account/findOne/:email', function (req, res) {
+app.get('/account/findOne/:email', verifyToken, function (req, res) {
 
     dal.findOne(req.params.email).
         then((user) => {
@@ -77,7 +76,7 @@ app.get('/account/findOne/:email', function (req, res) {
 
 
 // update - deposit/withdraw amount
-app.get('/account/update/:email/:amount', function (req, res) {
+app.get('/account/update/:email/:amount', verifyToken, function (req, res) {
 
     var amount = Number(req.params.amount);
 
@@ -89,7 +88,7 @@ app.get('/account/update/:email/:amount', function (req, res) {
 });
 
 // all accounts
-app.get('/account/all', function (req, res) {
+app.get('/account/all', verifyToken, function (req, res) {
 
     dal.all().
         then((docs) => {