Updated to be compatible with frontend

Author: ServerDeveloper9447

.gitignore

@@ -1,2 +1,3 @@
 node_modules
 .env
+.next

backend/api.yaml

@@ -9,6 +9,38 @@ servers:
     description: Development server
 
 paths:
+  /verify:
+    get:
+      summary: Verify access token
+      security:
+         - bearerAuth: []
+      responses:
+        200:
+          description: Access token verified
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: integer
+                    example: 200
+                  message:
+                    type: string
+                    example: Verified
+        401:
+          description: Unauthorized
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: integer
+                    example: 401
+                  message:
+                    type: string
+                    example: Unauthorized
   /register:
     post:
       summary: Register a new user

backend/src/routes/login.ts

@@ -29,7 +29,7 @@ app.post('/login', LoginValidate, async (req, res) => {
         const token = generateAccessToken(email, user.username)
         const rt = await generateRefreshToken(email, user.username)
         await sendLoginMail(user.email, user.username)
-        res.status(200).send({status: 200, message: "User logged in", access_token: token, refresh_token: rt.token})
+        res.status(200).send({status: 200, message: "User logged in", userId: user._id, name: user.username, access_token: token, refresh_token: rt.token})
     } catch(_) {
         res.status(500).send({status: 500, message: "Unknown Error"})
     }

backend/src/routes/register.ts

@@ -27,9 +27,9 @@ app.post('/register', RegisterValidate, async (req, res) => {
         const token = generateAccessToken(email, username)
         const rt = await generateRefreshToken(email, username)
         const pwd = await Bun.password.hash(password)
-        await users.insertOne({email, username, password:pwd})
+        const newUser = await users.insertOne({email, username, password:pwd})
         await sendRegMail(email, username)
-        res.status(201).send({status:201, message: "User Created", access_token: token, refresh_token: rt.token})
+        res.status(201).send({status:201, message: "User Created", userId: newUser.insertedId, access_token: token, refresh_token: rt.token})
     } catch(_) {
         console.error(_);
 

backend/src/routes/verify.ts

@@ -0,0 +1,12 @@
+import {Router} from 'express'
+import { verifyAccessToken } from '../utils/tokens'
+
+const app = Router()
+
+app.get('/verify', (req, res) => {
+    if(verifyAccessToken(req.headers.authorization?.split(" ")[0] as string)) {
+        res.status(200).send({status: 200, message: "OK"})
+    } else {
+        res.status(401).send({status: 401, message: "Invalid token"})
+    }
+})

backend/src/utils/tokens.ts

@@ -17,4 +17,8 @@ export const refreshAccessToken = async (refreshToken: string) => {
     if(!t) throw Error("Invalid refresh token");
     if(t.expiresAt < new Date()) throw Error("Refresh token expired");
     return sign({username, email}, jwt_secret, {expiresIn: 15*60})
+}
+
+export const verifyAccessToken = (accessToken: string) => {
+    return verify(accessToken, jwt_secret)
 }