auth.js

import jwt from "jsonwebtoken";

const SECRET = "supersecretkey";

export function createToken(user) {
  return jwt.sign(user, SECRET, { expiresIn: "7d" });
}

export function verifyToken(token) {
  return jwt.verify(token, SECRET);
}