veritabanı bağlantısı kur kayıt verilerini orda sakla ve giriş yapanların bilgilerini oradan doğrula

login.html

@@ -35,8 +35,8 @@
                 <h1 class="text-2xl font-bold">Welcome Back</h1>
 <p class="text-white/80">Access your global shopping account</p>
             </div>
-            <form class="p-6">
-                <div class="mb-4">
+            <form id="login-form" class="p-6">
+<div class="mb-4">
                     <label for="email" class="block text-gray-700 text-sm font-medium mb-1">Email Address</label>
                     <input type="email" id="email" class="w-full px-4 py-2 border rounded-lg focus:outline-none focus:ring-2 focus:ring-secondary" required>
                 </div>

package.json

@@ -0,0 +1,23 @@
+```json
+{
+  "name": "bavulumkatar-api",
+  "version": "1.0.0",
+  "description": "API for BavulumKatar'da",
+  "main": "server.js",
+  "scripts": {
+    "start": "node server.js",
+    "dev": "nodemon server.js"
+  },
+  "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "cors": "^2.8.5",
+    "dotenv": "^16.0.3",
+    "express": "^4.18.2",
+    "jsonwebtoken": "^9.0.0",
+    "mongoose": "^7.3.1"
+  },
+  "devDependencies": {
+    "nodemon": "^2.0.22"
+  }
+}
+```

script.js

@@ -1,3 +1,4 @@
+
 // Main JavaScript for BavulumKatar'da
 document.addEventListener('DOMContentLoaded', function() {
     // Initialize animations
@@ -7,11 +8,16 @@ document.addEventListener('DOMContentLoaded', function() {
         element.style.animationDelay = `${index * 0.1}s`;
     });
     
-    // Form validation for signup
+    // Form validation and submission for signup
     const signupForm = document.getElementById('signup-form');
     if (signupForm) {
-        signupForm.addEventListener('submit', function(e) {
+        signupForm.addEventListener('submit', async function(e) {
             e.preventDefault();
+            
+            const firstName = document.getElementById('firstName').value;
+            const lastName = document.getElementById('lastName').value;
+            const email = document.getElementById('email').value;
+            const phone = document.getElementById('phone').value;
             const password = document.getElementById('password').value;
             const confirmPassword = document.getElementById('confirmPassword').value;
             
@@ -25,34 +31,105 @@ document.addEventListener('DOMContentLoaded', function() {
                 return;
             }
             
-            // Form is valid, proceed with submission
-            alert('Account created successfully! Redirecting...');
-            window.location.href = 'dashboard.html'; // This would be replaced with actual form submission
+            try {
+                const response = await fetch('http://localhost:5000/api/register', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({
+                        firstName,
+                        lastName,
+                        email,
+                        phone,
+                        password
+                    })
+                });
+                
+                const data = await response.json();
+                
+                if (!response.ok) {
+                    throw new Error(data.message || 'Registration failed');
+                }
+                
+                // Save token and redirect
+                localStorage.setItem('token', data.token);
+                window.location.href = 'orders.html';
+            } catch (err) {
+                alert(err.message || 'Registration failed. Please try again.');
+                console.error(err);
+            }
         });
     }
-    // Form validation for login
+    
+    // Form validation and submission for login
     const loginForm = document.getElementById('login-form');
     if (loginForm) {
-        loginForm.addEventListener('submit', function(e) {
+        loginForm.addEventListener('submit', async function(e) {
             e.preventDefault();
+            
             const email = document.getElementById('email').value;
             const password = document.getElementById('password').value;
             
-            if (!email || !password) {
-                alert('Please fill in all fields!');
-                return;
+            try {
+                const response = await fetch('http://localhost:5000/api/login', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({ email, password })
+                });
+                
+                const data = await response.json();
+                
+                if (!response.ok) {
+                    throw new Error(data.message || 'Login failed');
+                }
+                
+                // Save token and redirect
+                localStorage.setItem('token', data.token);
+                window.location.href = 'orders.html';
+            } catch (err) {
+                alert(err.message || 'Login failed. Please try again.');
+                console.error(err);
             }
-            
-            // Form is valid, proceed with submission
-            alert('Login successful! Redirecting...');
-            window.location.href = 'orders.html'; // Redirect to orders page after login
         });
     }
 
-    // Simulated order data
+    // Check authentication on protected pages
     if (window.location.pathname.includes('orders.html')) {
-        document.addEventListener('DOMContentLoaded', function() {
-            feather.replace();
-        });
+        const token = localStorage.getItem('token');
+        if (!token) {
+            window.location.href = 'login.html';
+            return;
+        }
+
+        // Fetch user data or orders here
+        feather.replace();
     }
-});
+});
+
+// Helper function for authenticated requests
+async function authFetch(url, options = {}) {
+    const token = localStorage.getItem('token');
+    
+    if (!token) {
+        window.location.href = 'login.html';
+        return;
+    }
+    
+    options.headers = {
+        ...options.headers,
+        'x-auth-token': token
+    };
+    
+    const response = await fetch(url, options);
+    
+    if (response.status === 401) {
+        localStorage.removeItem('token');
+        window.location.href = 'login.html';
+        return;
+    }
+    
+    return response;
+}

server.js

@@ -0,0 +1,120 @@
+require('dotenv').config();
+const express = require('express');
+const mongoose = require('mongoose');
+const bcrypt = require('bcryptjs');
+const cors = require('cors');
+const jwt = require('jsonwebtoken');
+
+const app = express();
+
+// Middleware
+app.use(cors());
+app.use(express.json());
+
+// MongoDB Connection
+mongoose.connect(process.env.MONGODB_URI || 'mongodb://localhost/bavulumkatar_db', {
+    useNewUrlParser: true,
+    useUnifiedTopology: true
+})
+.then(() => console.log('MongoDB connected'))
+.catch(err => console.log(err));
+
+// User Model
+const UserSchema = new mongoose.Schema({
+    firstName: { type: String, required: true },
+    lastName: { type: String, required: true },
+    email: { type: String, required: true, unique: true },
+    phone: { type: String },
+    password: { type: String, required: true },
+    createdAt: { type: Date, default: Date.now }
+});
+
+const User = mongoose.model('User', UserSchema);
+
+// Register Endpoint
+app.post('/api/register', async (req, res) => {
+    try {
+        const { firstName, lastName, email, phone, password } = req.body;
+        
+        // Check if user exists
+        const existingUser = await User.findOne({ email });
+        if (existingUser) {
+            return res.status(400).json({ message: 'Email already exists' });
+        }
+
+        // Hash password
+        const salt = await bcrypt.genSalt(10);
+        const hashedPassword = await bcrypt.hash(password, salt);
+
+        // Create user
+        const user = new User({
+            firstName,
+            lastName,
+            email,
+            phone,
+            password: hashedPassword
+        });
+
+        await user.save();
+
+        // Create token
+        const token = jwt.sign({ id: user._id }, process.env.JWT_SECRET || 'secret', {
+            expiresIn: '30d'
+        });
+
+        res.status(201).json({ token, user: { id: user._id, email: user.email } });
+    } catch (err) {
+        console.error(err);
+        res.status(500).json({ message: 'Server error' });
+    }
+});
+
+// Login Endpoint
+app.post('/api/login', async (req, res) => {
+    try {
+        const { email, password } = req.body;
+        
+        // Find user
+        const user = await User.findOne({ email });
+        if (!user) {
+            return res.status(400).json({ message: 'Invalid credentials' });
+        }
+
+        // Check password
+        const isMatch = await bcrypt.compare(password, user.password);
+        if (!isMatch) {
+            return res.status(400).json({ message: 'Invalid credentials' });
+        }
+
+        // Create token
+        const token = jwt.sign({ id: user._id }, process.env.JWT_SECRET || 'secret', {
+            expiresIn: '30d'
+        });
+
+        res.json({ token, user: { id: user._id, email: user.email } });
+    } catch (err) {
+        console.error(err);
+        res.status(500).json({ message: 'Server error' });
+    }
+});
+
+// Protected Route Example
+app.get('/api/me', async (req, res) => {
+    try {
+        const token = req.header('x-auth-token');
+        if (!token) return res.status(401).json({ message: 'No token, authorization denied' });
+
+        const decoded = jwt.verify(token, process.env.JWT_SECRET || 'secret');
+        const user = await User.findById(decoded.id).select('-password');
+        
+        if (!user) return res.status(404).json({ message: 'User not found' });
+        
+        res.json(user);
+    } catch (err) {
+        console.error(err);
+        res.status(500).json({ message: 'Server error' });
+    }
+});
+
+const PORT = process.env.PORT || 5000;
+app.listen(PORT, () => console.log(`Server running on port ${PORT}`));

signup.html

@@ -35,8 +35,8 @@
                 <h1 class="text-2xl font-bold">Create Your Account</h1>
 <p class="text-white/80">Join our global shopping community</p>
             </div>
-            <form class="p-6">
-                <div class="grid grid-cols-2 gap-4 mb-4">
+            <form id="signup-form" class="p-6">
+<div class="grid grid-cols-2 gap-4 mb-4">
                     <div>
                         <label for="firstName" class="block text-gray-700 text-sm font-medium mb-1">First Name</label>
                         <input type="text" id="firstName" class="w-full px-4 py-2 border rounded-lg focus:outline-none focus:ring-2 focus:ring-secondary" required>