vintage-auth 1.0.3 → 1.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vintage-auth",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Drop-in auth system for Express apps",
   "main": "index.js",
   "keywords": [

package/routes/auth.js

@@ -4,56 +4,41 @@ const jwt = require('jsonwebtoken')
 const User = require('../models/User')
 
 const router = express.Router()
-// routes/auth.js - top of /register
-if (!email || !password) 
-  return res.status(400).json({ message: 'Email and password required' })
-// POST /auth/register
+
 router.post('/register', async (req, res) => {
   try {
     const { email, password } = req.body
-
     const existing = await User.findOne({ email })
     if (existing) return res.status(400).json({ message: 'Email already exists' })
-
     const hashed = await bcrypt.hash(password, 10)
     const user = await User.create({ email, password: hashed })
-
     const token = jwt.sign({ id: user._id }, process.env.VINTAGE_JWT_SECRET, { expiresIn: '7d' })
-
     res.json({ token, user: { id: user._id, email } })
   } catch (err) {
     res.status(500).json({ message: 'Server error' })
   }
 })
 
-// POST /auth/login
 router.post('/login', async (req, res) => {
   try {
     const { email, password } = req.body
-
     const user = await User.findOne({ email })
     if (!user) return res.status(400).json({ message: 'Invalid credentials' })
-
     const match = await bcrypt.compare(password, user.password)
     if (!match) return res.status(400).json({ message: 'Invalid credentials' })
-
     const token = jwt.sign({ id: user._id }, process.env.VINTAGE_JWT_SECRET, { expiresIn: '7d' })
-
     res.json({ token, user: { id: user._id, email } })
   } catch (err) {
     res.status(500).json({ message: 'Server error' })
   }
 })
 
-// GET /auth/me
 router.get('/me', async (req, res) => {
   try {
     const token = req.headers.authorization?.split(' ')[1]
     if (!token) return res.status(401).json({ message: 'No token' })
-
     const decoded = jwt.verify(token, process.env.VINTAGE_JWT_SECRET)
     const user = await User.findById(decoded.id).select('-password')
-
     res.json(user)
   } catch {
     res.status(401).json({ message: 'Invalid token' })