Authentication in Node.js with MongoDB, bcrypt, and JWT web Tokens with cookies.

npm init -ynpm i express bcryptjs body-parser dotenv ejs jsonwebtoken mongoose cookie-parser

const express = require('express');const bodyparser=require("body-parser");const mongoose= require('mongoose');const jwt = require('jsonwebtoken');var cookieParser = require('cookie-parser');const port = process.env.PORT || 3000;const app = express();require('dotenv').config();const bcrypt = require('bcryptjs');const salt = 10;app.set('view engine', 'ejs');app.use(bodyparser.urlencoded({extended:true}));app.use(bodyparser.json());app.use(cookieParser());app.use(express.static("public"));app.listen(port,()=>{    console.log(`Running on port ${port}`);})

// signin.ejs<form action="/login" method="post"><label for="">Email</label><input type="email" name="email" id=""><label for="">Password</label><input type="text" name="password" id=""><button type="submit">SignIN</button></form><form action="/signup" method="get"><button type="submit">    Do not have an account</button></form>

// signup.ejs<form action="/signup" method="post"><label for="">Email</label><input type="email" name="email" id=""><label for="">Password</label><input type="text" name="password" id=""><button type="submit">SignUP</button></form>

//home.ejsThis is the protected page

// get our urls and secretsconst JWT_SECRET=process.env.jwt;const MONGODB_URL=process.env.mongodb;// making connnection with our databasemongoose.connect(MONGODB_URL, {useFindAndModify: false,useNewUrlParser: true, useUnifiedTopology: true,useCreateIndex: true});

const express = require('express');const bodyparser=require("body-parser");const mongoose= require('mongoose');const jwt = require('jsonwebtoken');var cookieParser = require('cookie-parser');const port = process.env.PORT || 3000;const app = express();require('dotenv').config();const bcrypt = require('bcryptjs');const salt = 10;app.set('view engine', 'ejs');app.use(bodyparser.urlencoded({extended:true}));app.use(bodyparser.json());app.use(cookieParser());app.use(express.static("public"));// get our urls and secretsconst JWT_SECRET=process.env.jwt;const MONGODB_URL=process.env.mongodb;// making connnection with our databasemongoose.connect(MONGODB_URL, {useFindAndModify: false,useNewUrlParser: true, useUnifiedTopology: true,useCreateIndex: true});app.listen(port,()=>{    console.log(`Running on port ${port}`);})

// Schema For User Authconst userSchema = new mongoose.Schema({    email:{type:String,required:true,unique:true},    password:{type:String,required:true}},{collection:'users'}const User= mongoose.model("User",userSchema);)

app.post('/signup',async (req,res)=>{    // geting our data from frontend    const {email,password:plainTextPassword}=req.body;    // encrypting our password to store in database    const password = await bcrypt.hash(plainTextPassword,salt);    try {        // storing our user data into database        const response = await User.create({            email,            password        })        return res.redirect('/');    } catch (error) {        console.log(JSON.stringify(error));        if(error.code === 11000){            return res.send({status:'error',error:'email already exists'})        }        throw error    }})

// user login functionconst verifyUserLogin = async (email,password)=>{    try {        const user = await User.findOne({email}).lean()        if(!user){            return {status:'error',error:'user not found'}        }        if(await bcrypt.compare(password,user.password)){            // creating a JWT token            token = jwt.sign({id:user._id,username:user.email,type:'user'},JWT_SECRET)            return {status:'ok',data:token}        }        return {status:'error',error:'invalid password'}    } catch (error) {        console.log(error);        return {status:'error',error:'timed out'}    }}// login app.post('/login',async(req,res)=>{    const {email,password}=req.body;    // we made a function to verify our user login    const response = await verifyUserLogin(email,password);    if(response.status==='ok'){        // storing our JWT web token as a cookie in our browser        res.cookie('token',token,{ maxAge: 2 * 60 * 60 * 1000, httpOnly: true });  // maxAge: 2 hours        res.redirect('/');    }else{        res.json(response);    }})

const verifyToken = (token)=>{    try {        const verify = jwt.verify(token,JWT_SECRET);        if(verify.type==='user'){return true;}        else{return false};    } catch (error) {        console.log(JSON.stringify(error),"error");        return false;    }}// get requestsapp.get('/',(req,res)=>{    const {token}=req.cookies;    if(verifyToken(token)){        return res.render('home');    }else{        res.redirect('/login')    }})app.get('/login',(req,res)=>{    res.render('signin');})app.get('/signup',(req,res)=>{    res.render('signup')})app.listen(port,()=>{    console.log(`Running on port ${port}`);})

const express = require('express');const bodyparser=require("body-parser");const mongoose= require('mongoose');const jwt = require('jsonwebtoken');var cookieParser = require('cookie-parser');const port = process.env.PORT || 3000;const app = express();require('dotenv').config();const bcrypt = require('bcryptjs');const salt = 10;app.set('view engine', 'ejs');app.use(bodyparser.urlencoded({extended:true}));app.use(bodyparser.json());app.use(cookieParser());app.use(express.static("public"));// get our urls and secretsconst JWT_SECRET=process.env.jwt;const MONGODB_URL=process.env.mongodb;// making connnection with our databasemongoose.connect(MONGODB_URL, {useFindAndModify: false,useNewUrlParser: true, useUnifiedTopology: true,useCreateIndex: true});// Schema For User Authconst userSchema = new mongoose.Schema({    email:{type:String,required:true,unique:true},    password:{type:String,required:true}},{collection:'users'})const User= mongoose.model("User",userSchema);app.post('/signup',async (req,res)=>{    // geting our data from frontend    const {email,password:plainTextPassword}=req.body;    // encrypting our password to store in database    const password = await bcrypt.hash(plainTextPassword,salt);    try {        // storing our user data into database        const response = await User.create({            email,            password        })        return res.redirect('/');    } catch (error) {        console.log(JSON.stringify(error));        if(error.code === 11000){            return res.send({status:'error',error:'email already exists'})        }        throw error    }})// user login functionconst verifyUserLogin = async (email,password)=>{    try {        const user = await User.findOne({email}).lean()        if(!user){            return {status:'error',error:'user not found'}        }        if(await bcrypt.compare(password,user.password)){            // creating a JWT token            token = jwt.sign({id:user._id,username:user.email,type:'user'},JWT_SECRET)            return {status:'ok',data:token}        }        return {status:'error',error:'invalid password'}    } catch (error) {        console.log(error);        return {status:'error',error:'timed out'}    }}// login app.post('/login',async(req,res)=>{    const {email,password}=req.body;    // we made a function to verify our user login    const response = await verifyUserLogin(email,password);    if(response.status==='ok'){        // storing our JWT web token as a cookie in our browser        res.cookie('token',token,{ maxAge: 2 * 60 * 60 * 1000, httpOnly: true });  // maxAge: 2 hours        res.redirect('/');    }else{        res.json(response);    }})const verifyToken = (token)=>{    try {        const verify = jwt.verify(token,JWT_SECRET);        if(verify.type==='user'){return true;}        else{return false};    } catch (error) {        console.log(JSON.stringify(error),"error");        return false;    }}// get requestsapp.get('/',(req,res)=>{    const {token}=req.cookies;    if(verifyToken(token)){        return res.render('home');    }else{        res.redirect('/login')    }})app.get('/login',(req,res)=>{    res.render('signin');})app.get('/signup',(req,res)=>{    res.render('signup')})app.listen(port,()=>{    console.log(`Running on port ${port}`);})