challenge

Challenge: Authentication API

37 / 53

90 minchallenge

You completed the free preview — you are ready for the full path.

All lessons are readable below. To write and run code from lesson 11 onwards, upgrade to Path Plus ($9/mo) or Pro.

1 min read

Challenge: Auth System

Build a complete authentication API with registration, login, and a protected route.

Endpoints:

Method	Path	Description
POST	/register	Hash password, store user in-memory, return `{ id, email }`
POST	/login	Verify password, return signed JWT
GET	/me	Verify JWT from `Authorization: Bearer <token>` header, return user info

Requirements:

In-memory user store (array) — no database
bcrypt with 10 salt rounds
JWT signed with secret "nextsecret", expires in "1h"
POST /register with existing email → 409 { error: "Email already registered" }
POST /login with wrong credentials → 401 { error: "Invalid credentials" }
GET /me without or with invalid token → 401 { error: "Unauthorized" }
Print "Auth API ready" on start then close.

You completed the free preview — you are ready for the full path.

All lessons are readable below. To write and run code from lesson 11 onwards, upgrade to Path Plus ($9/mo) or Pro.

1 min read

Build a complete authentication API with registration, login, and a protected route.

Endpoints:

Method	Path	Description
POST	/register	Hash password, store user in-memory, return `{ id, email }`
POST	/login	Verify password, return signed JWT
GET	/me	Verify JWT from `Authorization: Bearer <token>` header, return user info

Requirements:

In-memory user store (array) — no database
bcrypt with 10 salt rounds
JWT signed with secret "nextsecret", expires in "1h"
POST /register with existing email → 409 { error: "Email already registered" }
POST /login with wrong credentials → 401 { error: "Invalid credentials" }
GET /me without or with invalid token → 401 { error: "Unauthorized" }
Print "Auth API ready" on start then close.

1 min read

Build a complete authentication API with registration, login, and a protected route.

Endpoints:

Method	Path	Description
POST	/register	Hash password, store user in-memory, return `{ id, email }`
POST	/login	Verify password, return signed JWT
GET	/me	Verify JWT from `Authorization: Bearer <token>` header, return user info

Requirements:

In-memory user store (array) — no database
bcrypt with 10 salt rounds
JWT signed with secret "nextsecret", expires in "1h"
POST /register with existing email → 409 { error: "Email already registered" }
POST /login with wrong credentials → 401 { error: "Invalid credentials" }
GET /me without or with invalid token → 401 { error: "Unauthorized" }
Print "Auth API ready" on start then close.

1 min read

Build a complete authentication API with registration, login, and a protected route.

Endpoints:

Method	Path	Description
POST	/register	Hash password, store user in-memory, return `{ id, email }`
POST	/login	Verify password, return signed JWT
GET	/me	Verify JWT from `Authorization: Bearer <token>` header, return user info

Requirements:

In-memory user store (array) — no database
bcrypt with 10 salt rounds
JWT signed with secret "nextsecret", expires in "1h"
POST /register with existing email → 409 { error: "Email already registered" }
POST /login with wrong credentials → 401 { error: "Invalid credentials" }
GET /me without or with invalid token → 401 { error: "Unauthorized" }
Print "Auth API ready" on start then close.