firt commit

server/controllers/authController.js

@@ -0,0 +1,63 @@
+import { query } from '../utils/database.js';
+import bcrypt from 'bcryptjs';
+
+export const checkPassword = async (req, res) => {
+  try {
+    const [settings] = await query('SELECT id FROM admin_settings WHERE setting_key = ?', ['admin_password']);
+    res.json({ isFirstTime: !settings });
+  } catch (error) {
+    console.error('Error checking password:', error);
+    res.status(500).json({ message: 'Failed to check password status' });
+  }
+};
+
+export const setPassword = async (req, res) => {
+  try {
+    const { password } = req.body;
+    if (!password) {
+      return res.status(400).json({ message: 'Password is required' });
+    }
+
+    const hashedPassword = await bcrypt.hash(password, 10);
+    
+    // Check if a password already exists
+    const [existingSettings] = await query('SELECT id FROM admin_settings WHERE setting_key = ?', ['admin_password']);
+    
+    if (existingSettings) {
+      // Update existing password
+      await query('UPDATE admin_settings SET setting_value = ? WHERE setting_key = ?', [hashedPassword, 'admin_password']);
+    } else {
+      // Insert new password
+      await query('INSERT INTO admin_settings (setting_key, setting_value) VALUES (?, ?)', ['admin_password', hashedPassword]);
+    }
+    
+    res.json({ message: 'Password set successfully' });
+  } catch (error) {
+    console.error('Error setting password:', error);
+    res.status(500).json({ message: 'Failed to set password' });
+  }
+};
+
+export const verifyPassword = async (req, res) => {
+  try {
+    const { password } = req.body;
+    if (!password) {
+      return res.status(400).json({ message: 'Password is required' });
+    }
+
+    const [settings] = await query('SELECT setting_value FROM admin_settings WHERE setting_key = ?', ['admin_password']);
+    if (!settings) {
+      return res.status(404).json({ message: 'No password set' });
+    }
+
+    const isValid = await bcrypt.compare(password, settings.setting_value);
+    if (!isValid) {
+      return res.status(401).json({ message: 'Invalid password' });
+    }
+
+    res.json({ message: 'Password verified successfully' });
+  } catch (error) {
+    console.error('Error verifying password:', error);
+    res.status(500).json({ message: 'Failed to verify password' });
+  }
+};