Very basic JWT Express login / register API (no database, no Bcrypt)

index.js

const express = require('express')
const morgan = require('morgan')
const jwt = require('jsonwebtoken')
const cors = require('cors')

const PORT = 1234
const SECRET = 'mykey'
const app = express()

app.use(cors())
app.use(morgan('tiny'))
app.use(express.json())
app.use(express.urlencoded({ extended: true }))

// Fake users
let users = [
    { id: 1, username: 'admin', password: 'password123' }
]

const extractBearerToken = headerValue => {
    if (typeof headerValue !== 'string') {
        return false
    }

    const matches = headerValue.match(/(bearer)\s+(\S+)/i)
    return matches && matches[2]
}

// The middleware
const checkTokenMiddleware = (req, res, next) => {
    const token = req.headers.authorization && extractBearerToken(req.headers.authorization)

    if (!token) {
        return res.status(401).json({ message: 'need a token' })
    }

    jwt.verify(token, SECRET, (err, decodedToken) => {
        if (err) {
            return res.status(401).json({ message: 'bad token' })
        }
    })

    next()
}

app.post('/login', (req, res) => {
    if (!req.body.username || !req.body.password) {
        return res.status(400).json({ message: 'enter the correct username and password' })
    }

    const user = users.find(u => u.username === req.body.username && u.password === req.body.password)

    if (!user) {
        return res.status(400).json({ message: 'wrong login or password' })
    }

    const token = jwt.sign({
        sub: user.id,
        username: user.username
    }, SECRET, { expiresIn: '3 hours' })

    res.json({ access_token: token })
})

app.post('/register', (req, res) => {
    if (!req.body.username || !req.body.password) {
        return res.status(400).json({ message: 'please enter username and password' })
    }

    const userExisting = users.find(u => u.username === req.body.username)

    if (userExisting) {
        return res.status(400).json({ message: `user ${req.body.username} already existing` })
    }

    const id = users[users.length - 1].id + 1
    const newUser = {
        id: id,
        username: req.body.username,
        password: req.body.password
    }

    users.push(newUser)

    res.status(201).json({ message: `user ${id} created`, content: newUser })
})

app.get('/me', checkTokenMiddleware, (req, res) => {
    const token = req.headers.authorization && extractBearerToken(req.headers.authorization)
    const decoded = jwt.decode(token, { complete: false })
    res.json({ content: decoded })
})

app.get('*', (req, res) => {
    res.status(404).json({ message: 'page not found' })
})

app.listen(PORT, () => {
    console.log(`Server is running on port ${PORT}.`)
})