# Server

PORT=5080
NODE_ENV=development

# Database

DB_HOST=localhost
DB_USER=root
DB_PASSWORD=your_password
DB_NAME=library_db
DB_PORT=3306

# JWT

JWT_SECRET=your_super_secret_key_here
JWT_EXPIRE=7d

# Security

CORS_ORIGINS=<http://localhost:3000,http://localhost:3001>
BCRYPT_ROUNDS=12
INITIAL_SETUP_KEY=your_secure_setup_key_here

Authorization: Bearer <your_jwt_token>

curl -X POST http://localhost:5080/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{
    "emailOrUsername": "user@example.com",
    "password": "Password123"
  }'

{
  "success": false,
  "message": "Error description",
  "error": "Detailed error message",
  "errors": [] // Optional validation errors
}

# Clone and install
git clone <repository>
npm install

# Generate secrets
node generate-secrets.js

# Setup database
mysql -u root -p < library.database.sql

# Start development server
npm run dev

# Use the setup key from your .env file
curl -X POST http://localhost:5080/api/auth/setup-admin \
  -H "Content-Type: application/json" \
  -d '{
    "admin_email": "admin@yourlibrary.com",
    "admin_password": "SecurePass123!",
    "setup_key": "YOUR_SETUP_KEY_FROM_ENV"
  }'

# Login as admin
curl -X POST <http://localhost:5080/api/auth/login> \
  -H "Content-Type: application/json" \
  -d '{
    "emailOrUsername": "<admin@yourlibrary.com>",
    "password": "SecurePass123!"
  }'

# Use the returned token for protected endpoints
curl -X GET <http://localhost:5080/api/auth/me> \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json"

LMS-API/
├── src/
│   ├── config/
│   │   ├── database.config.js    # Database configuration
│   │   └── auth.config.js        # Authentication configuration
│   ├── controllers/
│   │   ├── auth.controllers.js      # Authentication logic
│   │   ├── authors.controllers.js   # Author management
│   │   ├── books.controllers.js     # Book management
│   │   ├── users.controllers.js     # User management
│   │   └── bookRecords.controllers.js # Borrow records
│   ├── middlewares/
│   │   └── auth.middlewares.js      # Authentication & authorization
│   ├── models/
│   │   ├── authors.model.js         # Author data operations
│   │   ├── books.model.js           # Book data operations
│   │   ├── users.model.js           # User data operations
│   │   └── borrowedRecords.model.js # Borrow record operations
│   ├── routes/
│   │   ├── auth.routes.js           # Authentication routes
│   │   ├── authors.routes.js        # Author routes
│   │   ├── books.routes.js          # Book routes
│   │   ├── users.routes.js          # User routes
│   │   └── bookRecords.routes.js    # Borrow record routes
│   └── utils/
├── library.database.sql          # Database schema
├── generate-secrets.js           # Secret generation script
├── .env                          # Environment variables
├── package.json
├── server.js                     # Main server file
└── README.md

# Run in development mode with auto-reload
npm run dev

# Run in production mode
npm start

# Generate new secrets
node generate-secrets.js

curl -X POST http://localhost:5080/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "first_name": "John",
    "last_name": "Doe",
    "user_name": "johndoe",
    "email": "john@example.com",
    "password": "Password123"
  }'

curl -X POST http://localhost:5080/api/books \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "isbn": "978-0451524935",
    "title": "1984",
    "author_id": 1,
    "published_date": "1949-06-08",
    "genre": "Dystopian Fiction",
    "total_copies": 5
  }'

curl -X POST http://localhost:5080/api/books/1/borrow \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "due_days": 21
  }'