API's: employee onboarding, authentication through JWT

Co-authored-by: Copilot <copilot@github.com>

auth_api/.gitignore

@@ -0,0 +1,50 @@
+.env
+
+# Node dependencies
+node_modules/
+
+# Logs
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+*.log
+
+# Environment files
+.env.*
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+.envrc
+
+# OS files
+.DS_Store
+
+# Build / coverage
+dist/
+build/
+coverage/
+
+# Databases
+*.sqlite
+*.sqlite3
+*.db
+dump.sql
+
+# Keys and certificates
+*.pem
+*.key
+*.crt
+*.p12
+
+# IDE / editor
+.vscode/
+.idea/
+
+# Secrets and credentials
+secrets.env
+credentials.json
+
+# Temporary
+tmp/
+temp/

auth_api/db.js

@@ -0,0 +1,24 @@
+const { Pool } = require('pg');
+require('dotenv').config();
+const pool = new Pool({
+    host: process.env.PG_HOST,
+    port: process.env.PG_PORT,
+    user: process.env.PG_USER,
+    password: process.env.PG_PASS,
+    database: process.env.PG_DB,
+    max: 10,
+    idleTimeoutMillis: 30000
+});
+
+pool.query('SELECT 1')
+  .then(() => console.log('PostgreSQL connection OK'))
+  .catch(err => {
+    console.error('PostgreSQL connection FAILED');
+    console.error(err);
+    process.exit(1);
+  });
+
+module.exports = {
+  query: (text, params) => pool.query(text, params),
+  pool
+};

auth_api/index.js

@@ -0,0 +1,50 @@
+const express = require('express');
+const bcrypt = require('bcryptjs');
+const jwt = require('jsonwebtoken');
+const db = require('./db');
+require('dotenv').config();
+
+const app = express();
+app.use(express.json());
+
+const JWT_SECRET = process.env.JWT_SECRET;
+
+
+app.post('/login', async (req, res) => {
+  try {
+    const { userCode, password } = req.body;
+    if (!userCode || !password) return res.status(400).json({ error: 'userCode and password required' });
+
+    const result = await db.query('SELECT id, usercode, password FROM workers.users WHERE usercode = $1', [userCode]);
+    const user = result.rows[0];
+    if (!user) return res.status(401).json({ error: 'invalid_credentials' });
+
+    const ok = await bcrypt.compare(password, user.password);
+    if (!ok) return res.status(401).json({ error: 'invalid_credentials' });
+
+    const payload = { userId: user.id, userCode: user.usercode };
+    const token = jwt.sign(payload, JWT_SECRET, { expiresIn: '1h' });
+
+    res.json({ token, user: { id: user.id, userCode: user.userCode, job: user.job } });
+  } catch (err) {
+    console.error(err);
+    res.status(500).json({ error: 'internal_error' });
+  }
+});
+
+app.get('/me', async (req, res) => {
+  const auth = req.headers.authorization;
+  if (!auth || !auth.startsWith('Bearer ')) return res.status(401).json({ error: 'missing_token' });
+  const token = auth.slice(7);
+  try {
+    const payload = jwt.verify(token, JWT_SECRET);
+    res.json({ user: payload });
+  } catch (err) {
+    res.status(401).json({ error: 'invalid_token' });
+  }
+});
+
+const PORT = process.env.PORT || 5000;
+app.listen(PORT, () => console.log(`Auth API listening on ${PORT}`));
+
+module.exports = app;

auth_api/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "auth_api",
+  "version": "1.0.0",
+  "description": "Authentication API",
+  "license": "ISC",
+  "author": "",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "start": "node index.js",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "dotenv": "^16.0.3",
+    "express": "^4.18.2",
+    "jsonwebtoken": "^9.0.0",
+    "pg": "^8.11.0"
+  }
+}