مدیریت امن رمز عبور در جاوااسکریپت با BcryptJS

app.js
auth.js
db.js
User.js

npm init -y
npm install express mongoose bcryptjs nodemon

const mongoose = require("mongoose");
const mongoURI = "mongodb://127.0.0.1:27017/bcrypt_database";

const connectMongo = async () => {
  try {
    await mongoose.connect(mongoURI);
    console.log("Connected to MongoDB!");
  } catch (error) {
    console.error("MongoDB Error:", error.message);
  }
};

module.exports = connectMongo;

const mongoose = require("mongoose");

const UserSchema = new mongoose.Schema({
  email: { type: String, required: true, unique: true },
  password: { type: String, required: true },
});

module.exports = mongoose.model("user", UserSchema);

const connectToMongo = require("./db");
const express = require("express");

const app = express();
connectToMongo();

app.use(express.json());
app.use("/auth", require("./auth"));

app.listen(3300, () => {
  console.log("Server running on port 3300");
});

const express = require("express");
const router = express.Router();
const User = require("./User");
const bcrypt = require("bcryptjs");

router.post("/signup", async (req, res) => {
  const salt = await bcrypt.genSalt(10);
  const secPass = await bcrypt.hash(req.body.password, salt);

  const user = await User.create({
    email: req.body.email,
    password: secPass,
  });

  res.json({ user });
});

router.post("/login", async (req, res) => {
  const user = await User.findOne({ email: req.body.email });
  if (!user) return res.status(400).json({ error: "Invalid credentials" });

  const match = await bcrypt.compare(req.body.password, user.password);
  if (!match) return res.status(400).json({ error: "Invalid credentials" });

  res.json({ success: "Authenticated!" });
});

module.exports = router;