vintage-auth 1.0.0

package/index.js

@@ -0,0 +1,19 @@
+const express = require('express')
+const cors = require('cors')
+const vintageAuth = require('./index') // wait, your first file is the package itself?
+
+// If your first code block IS index.js, then you use it like this:
+
+const app = express()
+app.use(cors())
+app.use(express.json())
+
+// Mount vintage-auth
+const authRouter = vintageAuth({
+  mongoUri: 'mongodb://localhost:27017/vintage',
+  jwtSecret: 'supersecret_dev_key'
+})
+
+app.use('/api', authRouter) // now routes = /api/auth/register
+
+app.listen(3001, () => console.log('Backend on 3001'))

package/models/User.js

@@ -0,0 +1,9 @@
+const mongoose = require('mongoose')
+
+const userSchema = new mongoose.Schema({
+  email: { type: String, required: true, unique: true },
+  password: { type: String, required: true },
+  createdAt: { type: Date, default: Date.now }
+})
+
+module.exports = mongoose.model('User', userSchema)

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "vintage-auth",
+  "version": "1.0.0",
+  "description": "Drop-in auth system for Express apps",
+  "main": "index.js",
+  "keywords": ["auth", "express", "jwt", "mongodb"],
+  "license": "MIT",
+  "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "jsonwebtoken": "^9.0.0",
+    "mongoose": "^8.0.0"
+  }
+}

package/routes/auth.js

@@ -0,0 +1,63 @@
+const express = require('express')
+const bcrypt = require('bcryptjs')
+const jwt = require('jsonwebtoken')
+const User = require('../models/User')
+
+const router = express.Router()
+// routes/auth.js - top of /register
+if (!email || !password) 
+  return res.status(400).json({ message: 'Email and password required' })
+// POST /auth/register
+router.post('/register', async (req, res) => {
+  try {
+    const { email, password } = req.body
+
+    const existing = await User.findOne({ email })
+    if (existing) return res.status(400).json({ message: 'Email already exists' })
+
+    const hashed = await bcrypt.hash(password, 10)
+    const user = await User.create({ email, password: hashed })
+
+    const token = jwt.sign({ id: user._id }, process.env.VINTAGE_JWT_SECRET, { expiresIn: '7d' })
+
+    res.json({ token, user: { id: user._id, email } })
+  } catch (err) {
+    res.status(500).json({ message: 'Server error' })
+  }
+})
+
+// POST /auth/login
+router.post('/login', async (req, res) => {
+  try {
+    const { email, password } = req.body
+
+    const user = await User.findOne({ email })
+    if (!user) return res.status(400).json({ message: 'Invalid credentials' })
+
+    const match = await bcrypt.compare(password, user.password)
+    if (!match) return res.status(400).json({ message: 'Invalid credentials' })
+
+    const token = jwt.sign({ id: user._id }, process.env.VINTAGE_JWT_SECRET, { expiresIn: '7d' })
+
+    res.json({ token, user: { id: user._id, email } })
+  } catch (err) {
+    res.status(500).json({ message: 'Server error' })
+  }
+})
+
+// GET /auth/me
+router.get('/me', async (req, res) => {
+  try {
+    const token = req.headers.authorization?.split(' ')[1]
+    if (!token) return res.status(401).json({ message: 'No token' })
+
+    const decoded = jwt.verify(token, process.env.VINTAGE_JWT_SECRET)
+    const user = await User.findById(decoded.id).select('-password')
+
+    res.json(user)
+  } catch {
+    res.status(401).json({ message: 'Invalid token' })
+  }
+})
+
+module.exports = router