Implemented session-based authentication solution

src/server.js

@@ -17,19 +17,36 @@ app.use(
 // Login route
 app.post("/login", (req, res) => {
   // Write your code here
-
+  const { username, password } = req.body;
+  if (username == "admin" && password === "secret") {
+    req.session.user = { username };
+    res.status(200).json({ message: "Login successful" });
+  } else {
+    res.status(401).json({ message: "Invalid credentials" });
+  }
 });
 
 // Profile route (protected)
 app.get("/profile", (req, res) => {
   // Write your code here
-
+  if (req.session.user) {
+    res.status(200).json({ message: `Welcome, ${req.session.user.username}` });
+  } else {
+    res.status(401).json({ message: "Unauthorized" });
+  }
 });
 
 // Logout route
-app.get("/logout", (req, res) => {
+app.post("/logout", (req, res) => {
   // Write your code here
-
+  req.session.destroy((err) => {
+    if (err) {
+      res.status(500).json({ message: "Logout failed" });
+    } else {
+      res.clearCookie("connect.sid");
+      res.status(200).json({ message: "Logout successful" });
+    }
+  });
 });
 
 // Start server only if not in test mode