Dicken Dock v1.0.0

backend/src/routes/auth.js

@@ -0,0 +1,37 @@
+const express = require('express');
+const bcrypt  = require('bcryptjs');
+const jwt     = require('jsonwebtoken');
+const db      = require('../db');
+const { authenticate } = require('../middleware/auth');
+
+const router = express.Router();
+const SECRET = process.env.JWT_SECRET || 'dev-secret';
+
+// POST /api/auth/login
+router.post('/login', (req, res) => {
+  const { username, password } = req.body;
+  const user = db.prepare('SELECT * FROM users WHERE username = ?').get(username);
+  if (!user || !bcrypt.compareSync(password, user.password_hash))
+    return res.status(401).json({ error: 'Benutzername oder Passwort falsch' });
+
+  const token = jwt.sign(
+    { id: user.id, username: user.username, role: user.role },
+    SECRET, { expiresIn: '7d' }
+  );
+  res.json({ token, user: { id: user.id, username: user.username, role: user.role } });
+});
+
+// POST /api/auth/change-password
+router.post('/change-password', authenticate, (req, res) => {
+  const { currentPassword, newPassword } = req.body;
+  const user = db.prepare('SELECT * FROM users WHERE id = ?').get(req.user.id);
+  if (!bcrypt.compareSync(currentPassword, user.password_hash))
+    return res.status(400).json({ error: 'Aktuelles Passwort falsch' });
+  if (!newPassword || newPassword.length < 8)
+    return res.status(400).json({ error: 'Mindestens 8 Zeichen erforderlich' });
+  db.prepare('UPDATE users SET password_hash = ? WHERE id = ?')
+    .run(bcrypt.hashSync(newPassword, 12), req.user.id);
+  res.json({ success: true });
+});
+
+module.exports = router;