Web-App Entwicklung in Köln

// models/user.ts
import mongoose, { Schema } from 'mongoose';

const UserSchema = new Schema({
  email: { type: String, required: true, unique: true, index: true },
  passwordHash: { type: String, required: true },
  roles: { type: [String], default: ['user'] },
}, { timestamps: true });

export default mongoose.models.User || mongoose.model('User', UserSchema);

-----

// routes/auth.ts
import { Router } from 'express';
import { z } from 'zod';

const router = Router();
const Login = z.object({ email: z.string().email(), password: z.string().min(8) });

router.post('/login', async (req, res) => {
  const parsed = Login.safeParse(req.body);
  if (!parsed.success) return res.status(400).json({ errors: parsed.error.issues });
  // check credentials → issue JWT/refresh
  return res.json({ token: 'jwt', refresh: 'rt' });
});

export default router;