login.ts

    async login(request: Request, response: Response) {
        const { email, password } = request.body;

        try {
          const user = assert(await User.findOne({ email }));
          assert(bcrypt.compareSync(password, user.password));
        } catch(_) {
          return response.status(404).json({ message: 'email or password incorrect' })
        } 
        
        const token = jwt.sign({
            email: user.email,
            id: user._id
        }, config.accessTokenSecret!, { expiresIn: '30d' });

        response.status(200).json({ token });
    }