changed project struture.

Also addded a functional JWT token service.

Also added user react frontend

backend/server.js

@@ -21,16 +21,22 @@ app.use(cors());
 app.use(cookieParser());
 
 app.post("/api/login", async (req, res) => {
-  console.log(req.body);
-
   try {
     const result = await loginUser(req.body.username, req.body.password);
-    if (result.success) {
-      const userToken = await generateToken({ username: req.body.username });
-      res.status(200).json(
-        result, // This is the user data that logged in
-        { message: "Login successful", token: userToken }
-      );
+    if (result.success && result.role === "admin") {
+      const userToken = await generateToken({
+        role: result.user.role,
+        username: result.user.username,
+      });
+      console.log("User token generated: ", userToken);
+      res.status(200).json({
+        success: true,
+        message: "Login successful",
+        token: userToken,
+        ...result,
+      });
+    } else if (result.success && result.role === "user") {
+      
     } else {
       res.status(401).json(result, { message: "Invalid credentials" });
     }
@@ -40,17 +46,26 @@ app.post("/api/login", async (req, res) => {
   }
 });
 
-app.get("/api/getAllUsers", async (req, res) => {
-  getAllUsers()
-    .then((users) => {
-      res.status(200).json(users);
-    })
-    .catch((err) => {
-      console.error("Error fetching users:", err);
-      res
-        .status(500)
-        .json({ success: false, message: "Internal server error" });
-    });
+app.get("/api/getAllUsers", authenticate, async (req, res) => {
+  if (req.user.role === "admin") {
+    getAllUsers()
+      .then((users) => {
+        res.status(200).json(users);
+      })
+      .catch((err) => {
+        console.error("Error fetching users:", err);
+        res
+          .status(500)
+          .json({ success: false, message: "Internal server error" });
+      });
+    console.log("Fetched all users successfully");
+  } else if (req.user.role === "user") {
+    res.status(403).json({ success: false, message: "Access denied" });
+    console.log("Access denied for user role");
+  } else {
+    res.status(500).json({ success: false, message: "Server error" });
+    console.log("Server error while fetching users");
+  }
 });
 
 app.listen(port, () => {

backend/services/tokenService.js

@@ -6,24 +6,23 @@ env.config();
 const secret = new TextEncoder().encode(process.env.SECRET_KEY);
 
 export async function generateToken(payload) {
-  return await new SignJWT(payload)
+  const newToken = await new SignJWT(payload)
     .setProtectedHeader({ alg: "HS256" })
     .setIssuedAt()
     .setExpirationTime("2h") // Token valid for 2 hours
     .sign(secret);
+  console.log("Generated token: ", newToken);
+  return newToken;
 }
 
 export async function authenticate(req, res, next) {
-  const token = req.cookies.token;
+  const authHeader = req.headers["authorization"];
+  const token = authHeader && authHeader.split(" ")[1]; // Bearer <token>
 
-  if (!token) return res.status(401).send("No token provided");
+  if (token == null) return res.sendStatus(401); // No token present
 
-  try {
-    const { payload } = await jwtVerify(token, secret);
-    req.user = payload;
-    next();
-  } catch (e) {
-    console.log("TOKEN SERVICE ERROR: ", e)
-    return res.status(403).send("Invalid or expired token");
-  }
+  const { payload } = await jwtVerify(token, secret);
+  req.user = payload;
+
+  next();
 }