feat: autenticacion completa - registro, login, refresh, middleware y tests

.gitignore

@@ -3,4 +3,5 @@ dist/
 .env
 *.log
 .DS_Store
-.vscode/
+GIT-WORKFLOW.md
+

package.json

@@ -15,12 +15,16 @@
   "license": "ISC",
   "type": "commonjs",
   "dependencies": {
+    "bcryptjs": "^3.0.3",
     "cors": "^2.8.6",
-    "express": "^5.2.1"
+    "express": "^5.2.1",
+    "jsonwebtoken": "^9.0.3"
   },
   "devDependencies": {
+    "@types/bcryptjs": "^2.4.6",
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
+    "@types/jsonwebtoken": "^9.0.10",
     "@types/supertest": "^7.2.0",
     "supertest": "^7.2.2",
     "tsx": "^4.22.4",

src/app.ts

@@ -3,12 +3,14 @@ import { notFound } from "./middleware/notFound.js"
 import { errorHandler } from "./middleware/errorHandler.js"
 import healthRouter from './routes/health.js'
 import pingRouter from './routes/ping.js'
+import authRouter from './routes/auth.js'
 
 export const app = express()
 
 app.use(express.json())
 app.use('/health', healthRouter)
 app.use('/api/ping', pingRouter)
+app.use('/auth', authRouter)
 app.use(notFound)
 app.use(errorHandler)
 

src/middleware/auth.ts

@@ -0,0 +1,21 @@
+import type { Request, Response, NextFunction } from 'express'
+import jwt from 'jsonwebtoken'
+import { AppError } from '../errors/AppError.js'
+
+export function authMiddleware(req: Request, _res: Response, next: NextFunction) {
+    const header = req.headers.authorization
+
+    if (!header || !header.startsWith('Bearer ')) {
+        throw new AppError(401, 'UNAUTHORIZED', 'Missing or invalid token')
+    }
+
+    const token = header.split(' ')[1]
+
+    try {
+        const payload = jwt.verify(token, 'secret') as { userId: string };
+        (req as any).userId = payload.userId
+        next()
+    } catch {
+        throw new AppError(401, 'UNAUTHORIZED', 'Invalid or expired token')
+    }
+}

src/repositories/userStore.ts

@@ -0,0 +1,21 @@
+export interface User {
+    id: string
+    email: string
+    password: string
+    name: string
+    createdAt: Date
+}
+
+const users = new Map<string, User>()
+
+export function createUser(email: string, password: string, name: string): User {
+    const id = crypto.randomUUID()
+    const user: User = { id, email, password, name, createdAt: new Date() }
+    users.set(id, user)
+    return user
+}
+
+export function findByEmail(email: string): User | undefined {
+    return Array.from(users.values()).find(u => u.email === email)
+}
+

src/routes/auth.ts

@@ -0,0 +1,25 @@
+import { Router, type Request, type Response } from 'express'
+import { refreshAccessToken, registerUser } from '../services/auth.js'
+import { loginUser } from '../services/auth.js'
+
+const router = Router()
+
+router.post('/register', (req: Request, res: Response) => {
+    const { email, password, name } = req.body
+    const result = registerUser(email, password, name)
+    res.json(result)
+})
+
+router.post('/login', (req: Request, res: Response) => {
+    const { email, password } = req.body
+    const result = loginUser(email, password)
+    res.json(result)
+})
+
+router.post('/refresh', (req: Request, res: Response) => {
+    const { refreshToken } = req.body
+    const result = refreshAccessToken(refreshToken)
+    res.json(result)
+})
+
+export default router 

src/routes/ping.ts

@@ -1,5 +1,6 @@
-import { Router } from 'express'
+import { Router, Response, Request } from 'express'
 import { ping }  from '../services/ping.js'
+import { authMiddleware } from '../middleware/auth.js'
 
 const router = Router()
 
@@ -8,4 +9,8 @@ router.get('/', (req, res) => {
     res.json(result)
 })
 
+router.get('/me', authMiddleware, (req: Request, res: Response) => {
+    res.json({ userId: (req as any).userId })
+})
+
 export default router