Add initial authentication system

server/app.js

@@ -0,0 +1,81 @@
+"use strict";
+const express = require('express');
+const DB = require('./db');
+const config = require('./config');
+const bcrypt = require('bcrypt');
+const jwt = require('jsonwebtoken');
+
+const db = new DB("sqlitedb")
+const app = express();
+const router = express.Router();
+
+router.use(express.urlencoded({ extended: false }));
+router.use(express.json());
+
+// CORS middleware
+const allowCrossDomain = function (req, res, next) {
+    res.header('Access-Control-Allow-Origin', '*');
+    res.header('Access-Control-Allow-Methods', '*');
+    res.header('Access-Control-Allow-Headers', '*');
+    next();
+}
+
+app.use(allowCrossDomain)
+
+router.post('/register', function (req, res) {
+    db.insert([
+        req.body.name,
+        req.body.email,
+        bcrypt.hashSync(req.body.password, 8)
+    ],
+        function (err) {
+            if (err) return res.status(500).send("There was a problem registering the user.")
+            db.selectByEmail(req.body.email, (err, user) => {
+                if (err) return res.status(500).send("There was a problem getting user")
+                let token = jwt.sign({ id: user.id }, config.secret, {
+                    expiresIn: 86400 // expires in 24 hours
+                });
+                res.status(200).send({ auth: true, token: token, user: user });
+            });
+        });
+});
+
+router.post('/register-admin', function (req, res) {
+    db.insertAdmin([
+        req.body.name,
+        req.body.email,
+        bcrypt.hashSync(req.body.password, 8),
+        1
+    ],
+        function (err) {
+            if (err) return res.status(500).send("There was a problem registering the user.")
+            db.selectByEmail(req.body.email, (err, user) => {
+                if (err) return res.status(500).send("There was a problem getting user")
+                let token = jwt.sign({ id: user.id }, config.secret, {
+                    expiresIn: 86400 // expires in 24 hours
+                });
+                res.status(200).send({ auth: true, token: token, user: user });
+            });
+        });
+});
+
+router.post('/login', (req, res) => {
+    db.selectByEmail(req.body.email, (err, user) => {
+        if (err) return res.status(500).send('Error on the server.');
+        if (!user) return res.status(404).send('No user found.');
+        let passwordIsValid = bcrypt.compareSync(req.body.password, user.user_pass);
+        if (!passwordIsValid) return res.status(401).send({ auth: false, token: null });
+        let token = jwt.sign({ id: user.id }, config.secret, {
+            expiresIn: 86400 // expires in 24 hours
+        });
+        res.status(200).send({ auth: true, token: token, user: user });
+    });
+})
+
+app.use(router)
+
+let port = process.env.PORT || 3000;
+
+let server = app.listen(port, function () {
+    console.log('Express server listening on port ' + port)
+});

server/config.js

@@ -0,0 +1,3 @@
+module.exports = {
+    'secret': 'supersecret'
+};

server/db.js

@@ -0,0 +1,52 @@
+"use strict";
+const sqlite3 = require('sqlite3').verbose();
+
+class Db {
+    constructor(file) {
+        this.db = new sqlite3.Database(file);
+        this.createTable()
+    }
+
+    createTable() {
+        const sql = `
+            CREATE TABLE IF NOT EXISTS user (
+                id integer PRIMARY KEY,
+                name text,
+                email text UNIQUE,
+                user_pass text,
+                is_admin integer)`
+        return this.db.run(sql);
+    }
+
+    selectByEmail(email, callback) {
+        return this.db.get(
+            `SELECT * FROM user WHERE email = ?`,
+            [email], function (err, row) {
+                callback(err, row)
+            })
+    }
+
+    insertAdmin(user, callback) {
+        return this.db.run(
+            'INSERT INTO user (name,email,user_pass,is_admin) VALUES (?,?,?,?)',
+            user, (err) => {
+                callback(err)
+            })
+    }
+
+    selectAll(callback) {
+        return this.db.all(`SELECT * FROM user`, function (err, rows) {
+            callback(err, rows)
+        })
+    }
+
+    insert(user, callback) {
+        return this.db.run(
+            'INSERT INTO user (name,email,user_pass) VALUES (?,?,?)',
+            user, (err) => {
+                callback(err)
+            })
+    }
+}
+
+module.exports = Db