PR for review & submission of the happy thoughts API (will also open a PR for the frontend)

data/data.json

@@ -0,0 +1,42 @@
+[
+  {
+    "id": 1,
+    "message": "I finally fixed the login bug! 🎉",
+    "category": "project",
+    "hearts": 3,
+    "createdAt": "2024-06-01T10:30:00Z",
+    "likedBy": ["user123"]
+  },
+  {
+    "id": 2,
+    "message": "Meal prepped for the week. Feeling organized!",
+    "category": "home",
+    "hearts": 5,
+    "createdAt": "2024-06-03T08:15:00Z",
+    "likedBy": []
+  },
+  {
+    "id": 3,
+    "message": "Pasta night with friends 🍝❤️",
+    "category": "food",
+    "hearts": 8,
+    "createdAt": "2024-06-05T19:00:00Z",
+    "likedBy": ["user123", "user456"]
+  },
+  {
+    "id": 4,
+    "message": "Started a new React project today!",
+    "category": "project",
+    "hearts": 4,
+    "createdAt": "2024-06-06T14:00:00Z",
+    "likedBy": []
+  },
+  {
+    "id": 5,
+    "message": "Cleaned the whole apartment and lit some candles 🕯️",
+    "category": "home",
+    "hearts": 2,
+    "createdAt": "2024-06-07T09:00:00Z",
+    "likedBy": ["user789"]
+  }
+]

middlewares/auth.js

@@ -0,0 +1,22 @@
+import jwt from "jsonwebtoken";
+
+const JWT_SECRET = process.env.JWT_SECRET;
+
+export const authenticate = (req, res, next) => {
+  const authHeader = req.headers.authorization;
+
+  if (!authHeader)
+    return res.status(401).json({ message: "Authorization header missing" });
+
+  const token = authHeader.split(" ")[1];
+
+  if (!token) return res.status(401).json({ message: "Token missing" });
+
+  try {
+    const decoded = jwt.verify(token, JWT_SECRET);
+    req.user = decoded;
+    next();
+  } catch (error) {
+    res.status(401).json({ message: "Invalid or expired token" });
+  }
+};

models/User.js

@@ -0,0 +1,27 @@
+import bcrypt from "bcrypt";
+import mongoose from "mongoose";
+
+const userSchema = new mongoose.Schema({
+  username: { type: String, required: true, unique: true, minlength: 3 },
+  email: { type: String, required: true, unique: true, lowercase: true },
+  password: { type: String, required: true, minlength: 6 },
+});
+
+userSchema.pre("save", async function (next) {
+  if (!this.isModified("password")) return next();
+
+  try {
+    const salt = await bcrypt.genSalt(10);
+    this.password = await bcrypt.hash(this.password, salt);
+    next();
+  } catch (error) {
+    next(error);
+  }
+});
+
+userSchema.methods.comparePassword = async function (candidatePassword) {
+  return bcrypt.compare(candidatePassword, this.password);
+};
+
+const User = mongoose.model("User", userSchema);
+export default User;

package.json

@@ -12,8 +12,13 @@
     "@babel/core": "^7.17.9",
     "@babel/node": "^7.16.8",
     "@babel/preset-env": "^7.16.11",
+    "bcrypt": "^6.0.0",
     "cors": "^2.8.5",
+    "dotenv": "^16.5.0",
     "express": "^4.17.3",
-    "nodemon": "^3.0.1"
+    "express-list-endpoints": "^7.1.1",
+    "jsonwebtoken": "^9.0.2",
+    "mongoose": "^8.15.1",
+    "nodemon": "^3.1.10"
   }
 }

routes/auth.js

@@ -0,0 +1,73 @@
+import express from "express";
+import jwt from "jsonwebtoken";
+
+import User from "../models/User.js";
+
+const router = express.Router();
+const JWT_SECRET = process.env.JWT_SECRET;
+
+// signing up as a user
+router.post("/signup", async (req, res) => {
+  const { username, email, password } = req.body;
+
+  try {
+    const existingUser = await User.findOne({ $or: [{ email }, { username }] });
+    if (existingUser) {
+      return res
+        .status(400)
+        .json({ success: false, message: "Username or email already exists." });
+    }
+
+    const newUser = new User({ username, email, password });
+    await newUser.save();
+
+    const token = jwt.sign(
+      { id: newUser._id, username: newUser.username },
+      JWT_SECRET,
+      {
+        expiresIn: "7d",
+      }
+    );
+
+    res.status(201).json({ success: true, message: "User created", token });
+  } catch (error) {
+    res
+      .status(500)
+      .json({ success: false, message: "Error creating user", error });
+  }
+});
+
+// login
+router.post("/login", async (req, res) => {
+  const { email, password } = req.body;
+
+  try {
+    const user = await User.findOne({ email });
+    if (!user) {
+      return res
+        .status(401)
+        .json({ success: false, message: "Invalid email or password" });
+    }
+
+    const isMatch = await user.comparePassword(password);
+    if (!isMatch) {
+      return res
+        .status(401)
+        .json({ success: false, message: "Invalid email or password" });
+    }
+
+    const token = jwt.sign(
+      { id: user._id, username: user.username },
+      JWT_SECRET,
+      {
+        expiresIn: "7d",
+      }
+    );
+
+    res.status(200).json({ success: true, message: "Logged in", token });
+  } catch (error) {
+    res.status(500).json({ success: false, message: "Login error", error });
+  }
+});
+
+export default router;