feat: basic api setup and boilerplate

backend/src/middleware/auth.js

@@ -0,0 +1,19 @@
+import {verifyToken} from "../utils/jwt.js";
+
+export default function jwtAuthMiddleware(req, res, next) {
+	const authHeader = req.headers.authorization;
+
+	if (!authHeader || !authHeader.startsWith("Bearer ")) {
+		return res.status(401).json({error: "No token provided"});
+	}
+
+	const token = authHeader.split(" ")[1];
+
+	try {
+		const user = verifyToken(token);
+		req.user = user;
+		next();
+	} catch (err) {
+		return res.status(401).json({error: "Invalid or expired token"});
+	}
+}