Update server.js

server.js

@@ -2,6 +2,7 @@ const express = require("express");
 const fs = require("fs");
 const path = require("path");
 const { exec } = require("child_process");
+const bcrypt = require("bcrypt");
 
 const app = express();
 app.use(express.json());
@@ -21,36 +22,67 @@ function appendLog(username, log) {
 }
 
 // Endpoint to handle user sign-up
-app.post("/signup", (req, res) => {
+app.post("/signup", async (req, res) => {
   const { username, password } = req.body;
 
-  const users = JSON.parse(fs.readFileSync(usersFile));
-  if (users.some((user) => user.username === username)) {
-    return res.status(400).send("User already exists.");
+  if (!username || !password) {
+    return res.status(400).send("Username and password are required.");
   }
 
-  users.push({ username, password });
-  fs.writeFileSync(usersFile, JSON.stringify(users));
-
-  const userDir = path.join(usersDir, username);
-  fs.mkdirSync(userDir);
-  fs.writeFileSync(path.join(userDir, "logs.txt"), "");
-
-  res.send("User signed up successfully.");
+  try {
+    const usersData = JSON.parse(fs.readFileSync(usersFile));
+    if (usersData.some((user) => user.username === username)) {
+      return res.status(400).send("User already exists.");
+    }
+
+    // Hash the password
+    const hashedPassword = await bcrypt.hash(password, 10);
+
+    // Add new user
+    usersData.push({ username, password: hashedPassword });
+    fs.writeFileSync(usersFile, JSON.stringify(usersData, null, 2));
+
+    // Create user directory and logs file
+    const userDir = path.join(usersDir, username);
+    if (!fs.existsSync(userDir)) {
+      fs.mkdirSync(userDir, { recursive: true });
+    }
+    fs.writeFileSync(path.join(userDir, "logs.txt"), "");
+
+    res.send("User signed up successfully.");
+  } catch (error) {
+    console.error("Error during signup:", error);
+    res.status(500).send("Internal server error.");
+  }
 });
 
 // Endpoint to handle login
-app.post("/login", (req, res) => {
+app.post("/login", async (req, res) => {
   const { username, password } = req.body;
 
-  const users = JSON.parse(fs.readFileSync(usersFile));
-  const user = users.find((u) => u.username === username && u.password === password);
-
-  if (!user) {
-    return res.status(400).send("Invalid credentials.");
+  if (!username || !password) {
+    return res.status(400).send("Username and password are required.");
   }
 
-  res.send("Login successful.");
+  try {
+    const usersData = JSON.parse(fs.readFileSync(usersFile));
+    const user = usersData.find((u) => u.username === username);
+
+    if (!user) {
+      return res.status(400).send("Invalid username or password.");
+    }
+
+    // Compare the provided password with the hashed password
+    const isPasswordValid = await bcrypt.compare(password, user.password);
+    if (!isPasswordValid) {
+      return res.status(400).send("Invalid username or password.");
+    }
+
+    res.send("Login successful.");
+  } catch (error) {
+    console.error("Error during login:", error);
+    res.status(500).send("Internal server error.");
+  }
 });
 
 // Endpoint to handle terminal commands