11. For the above application create authorized end points using JWT (JSON Web Token).
index.js
const express = require("express");
const mysql = require("mysql2");
const cors = require("cors");
const bodyParser = require("body-parser");
const jwt = require("jsonwebtoken");
const bcrypt = require("bcryptjs");
const app = express();
const PORT = 5000;
const SECRET_KEY = "your_secret_key"; // Change this in production
// Middleware
app.use(cors());
app.use(bodyParser.json());
// MySQL Database connection
const db = mysql.createConnection({
host: "localhost",
user: "root",
password: "",
database: "studentsDB"
});
db.connect(err => {
if (err) {
console.error("Error connecting to MySQL:", err);
return;
}
console.log("MySQL connected");
});
// Middleware to verify JWT
const verifyToken = (req, res, next) => {
const token = req.headers["authorization"];
if (!token) {
return res.status(403).json({ message: "Access denied. No token provided." });
}
jwt.verify(token.split(" ")[1], SECRET_KEY, (err, decoded) => {
if (err) {
return res.status(401).json({ message: "Invalid token" });
}
req.user = decoded;
next();
});
};
// Routes
// User Registration
app.post("/register", async (req, res) => {
const { username, password } = req.body;
// Hash the password
const hashedPassword = await bcrypt.hash(password, 10);
const query = "INSERT INTO users (username, password) VALUES (?, ?)";
db.query(query, [username, hashedPassword], (err, result) => {
if (err) {
return res.status(400).json({ error: err.message });
}
res.status(201).json({ message: "User registered successfully" });
});
});
// User Login
app.post("/login", (req, res) => {
const { username, password } = req.body;
const query = "SELECT * FROM users WHERE username = ?";
db.query(query, [username], async (err, result) => {
if (err) return res.status(500).json({ error: err.message });
if (result.length === 0) return res.status(401).json({ message: "Invalid credentials" });
const user = result[0];
// Compare password
const isMatch = await bcrypt.compare(password, user.password);
if (!isMatch) return res.status(401).json({ message: "Invalid credentials" });
// Generate JWT
const token = jwt.sign({ id: user.id, username: user.username }, SECRET_KEY, { expiresIn:
"1h" });
res.json({ token });
});
});
// Get all students (Protected Route)
app.get("/students", verifyToken, (req, res) => {
const query = "SELECT * FROM students";
db.query(query, (err, result) => {
if (err) return res.status(500).json({ error: err.message });
res.json(result);
});
});
// Get a single student (Protected Route)
app.get("/students/:id", verifyToken, (req, res) => {
const query = "SELECT * FROM students WHERE id = ?";
db.query(query, [req.params.id], (err, result) => {
if (err) return res.status(500).json({ error: err.message });
if (result.length === 0) return res.status(404).json({ message: "Student not found" });
res.json(result[0]);
});
});
// Create a student (Protected Route)
app.post("/students", verifyToken, (req, res) => {
const { name, age, course } = req.body;
const query = "INSERT INTO students (name, age, course) VALUES (?, ?, ?)";
db.query(query, [name, age, course], (err, result) => {
if (err) return res.status(400).json({ error: err.message });
res.status(201).json({ id: result.insertId, name, age, course });
});
});
// Update a student (Protected Route)
app.put("/students/:id", verifyToken, (req, res) => {
const { name, age, course } = req.body;
const query = "UPDATE students SET name = ?, age = ?, course = ? WHERE id = ?";
db.query(query, [name, age, course, req.params.id], (err, result) => {
if (err) return res.status(400).json({ error: err.message });
if (result.affectedRows === 0) return res.status(404).json({ message: "Student not found" });
res.json({ id: req.params.id, name, age, course });
});
});
// Delete a student (Protected Route)
app.delete("/students/:id", verifyToken, (req, res) => {
const query = "DELETE FROM students WHERE id = ?";
db.query(query, [req.params.id], (err, result) => {
if (err) return res.status(500).json({ error: err.message });
if (result.affectedRows === 0) return res.status(404).json({ message: "Student not found" });
res.json({ message: "Student deleted successfully" });
});
});
// Start the server
app.listen(PORT, () => {
console.log(`Server running on http://localhost:${PORT}`);
});
Procedure:
npm install jsonwebtoken bcryptjs
We need a users table to store login credentials. Run this SQL command in MySQL:
CREATE TABLE users (
id INT AUTO_INCREMENT PRIMARY KEY,
username VARCHAR(100) NOT NULL UNIQUE,
password VARCHAR(255) NOT NULL
);
Run:
node index.js
http://localhost:5000/register
http://localhost:5000/login
