json-server-auth

npm install -D json-server json-server-auth // Create db.json in your project root: // { // "users": [], // "posts": [] // } // Start the server (using json-server-auth's bundled CLI): // json-server-auth db.json // Example usage with Node.js fetch (run in a separate script or browser console): async function runAuthFlow() { const baseUrl = 'http://localhost:3000'; // Register a new user console.log('Registering user...'); const registerRes = await fetch(`${baseUrl}/register`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ email: 'test@example.com', password: 'password123', name: 'Test User' }) }); const registerData = await registerRes.json(); console.log('Registered:', registerData); let accessToken = registerData.accessToken; // Login with existing user (if accessToken is not available, e.g., after server restart) if (!accessToken) { console.log('Logging in user...'); const loginRes = await fetch(`${baseUrl}/login`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ email: 'test@example.com', password: 'password123' }) }); const loginData = await loginRes.json(); console.log('Logged in:', loginData); accessToken = loginData.accessToken; } // Access a protected resource (e.g., 'posts' with default auth rules 640) // 6: owner read/write, 4: logged-in read, 0: public no access if (accessToken) { console.log('Accessing protected posts...'); const postsRes = await fetch(`${baseUrl}/posts`, { headers: { 'Authorization': `Bearer ${accessToken}` } }); const postsData = await postsRes.json(); console.log('Posts:', postsData); } } // Uncomment the line below and run this script to test the flow: // runAuthFlow().catch(console.error);