first commit

server/routes/auth.js

@@ -0,0 +1,98 @@
+import express from 'express';
+import jwt from 'jsonwebtoken';
+import bcrypt from 'bcryptjs';
+
+const router = express.Router();
+
+// Mock database - replace with real DB in production
+const users = [
+  {
+    id: 1,
+    username: 'Hr_admin',
+    email: 'hr@7823cpmindia.com',
+    password:'Hr@12345',
+    // password: '$2a$10$u0F8fM.6qz.2D0X0Z7.D6O9K2n0F8fM.6qz.2D0X0Z7.D6O9K2n0F8', // password123
+    role: 'HR'
+  },
+  {
+    id: 2,
+    username: 'slip_admin',
+    email: 'slip@company.com',
+    // password: '$2a$10$u0F8fM.6qz.2D0X0Z7.D6O9K2n0F8fM.6qz.2D0X0Z7.D6O9K2n0F8', // password123
+     password:'Hr@12345',
+    role: 'SLIP'
+  }
+];
+
+// Signup
+router.post('/signup', async (req, res) => {
+  try {
+    const { username, email, password, role } = req.body;
+
+    if (!['HR', 'SLIP'].includes(role)) {
+      return res.status(400).json({ error: 'Invalid role' });
+    }
+
+    const hashedPassword = await bcrypt.hash(password, 10);
+    
+    const newUser = {
+      id: users.length + 1,
+      username,
+      email,
+      password: hashedPassword,
+      role
+    };
+
+    users.push(newUser);
+
+    const token = jwt.sign(
+      { id: newUser.id, username, role },
+      process.env.JWT_SECRET,
+      { expiresIn: process.env.JWT_EXPIRE }
+    );
+
+    res.status(201).json({ 
+      token, 
+      user: { id: newUser.id, username, email, role } 
+    });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+// Login
+router.post('/login', async (req, res) => {
+  try {
+    const { email, password } = req.body;
+
+    const user = users.find(u => u.email === email);
+    if (!user) {
+      return res.status(400).json({ error: 'Invalid credentials' });
+    }
+
+      const password1 = users.find(u => u.password === password);
+    if (!password1) {
+      return res.status(400).json({ error: 'Invalid credentials' });
+    }
+
+    // const isPasswordValid = await bcrypt.compare(password, user.password);
+    // if (!isPasswordValid) {
+    //   return res.status(400).json({ error: 'Invalid credentials' });
+    // }
+
+    const token = jwt.sign(
+      { id: user.id, username: user.username, role: user.role },
+      process.env.JWT_SECRET,
+      { expiresIn: process.env.JWT_EXPIRE }
+    );
+
+    res.json({ 
+      token, 
+      user: { id: user.id, username: user.username, email: user.email, role: user.role } 
+    });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+export default router;