JWT認証：開発者ガイド

1const jwt = require('jsonwebtoken');
2const bcrypt = require('bcrypt');
3
4// Login endpoint
5app.post('/login', async (req, res) => {
6  const { email, password } = req.body;
7  
8  try {
9    // Find user in database
10    const user = await User.findOne({ email });
11    if (!user) {
12      return res.status(401).json({ error: 'Invalid credentials' });
13    }
14    
15    // Verify password
16    const isValidPassword = await bcrypt.compare(password, user.passwordHash);
17    if (!isValidPassword) {
18      return res.status(401).json({ error: 'Invalid credentials' });
19    }
20    
21    // Create JWT
22    const token = jwt.sign(
23      { 
24        userId: user.id, 
25        email: user.email,
26        role: user.role 
27      },
28      process.env.JWT_SECRET,
29      { expiresIn: '1h' }
30    );
31    
32    res.json({ token, user: { id: user.id, email: user.email } });
33  } catch (error) {
34    res.status(500).json({ error: 'Server error' });
35  }
36});

1class AuthService {
2  constructor() {
3    this.token = localStorage.getItem('token');
4  }
5  
6  async login(email, password) {
7    try {
8      const response = await fetch('/api/login', {
9        method: 'POST',
10        headers: {
11          'Content-Type': 'application/json'
12        },
13        body: JSON.stringify({ email, password })
14      });
15      
16      if (!response.ok) {
17        throw new Error('Login failed');
18      }
19      
20      const data = await response.json();
21      this.token = data.token;
22      localStorage.setItem('token', this.token);
23      
24      return data;
25    } catch (error) {
26      console.error('Login error:', error);
27      throw error;
28    }
29  }
30}