From 919dceee69e19a9047f5ea8e52d47c638960a15b Mon Sep 17 00:00:00 2001
From: Megha Ahir <139430901+megha-ahir@users.noreply.github.com>
Date: Sun, 27 Sep 2026 15:27:25 +0530
Subject: [PATCH] complete task

---
 .env.example                      |   22 +-
 .gitignore                        |    6 +
 Dockerfile                        |    1 +
 Dockerfile.auth                   |   13 +
 authApi.js                        |   92 ++
 authConfig.js                     |   10 +
 chatbot.py                        |   61 +-
 docker-compose.yml                |   23 +-
 docker/authConfig.js              |    2 +
 home.css                          |   48 +
 home.html                         |   24 +-
 home.js                           |   36 +-
 index.html                        |   41 +-
 log/forgot-password.html          |   57 ++
 log/login.css                     |  196 ++++-
 log/login.html                    |   20 +-
 log/login.js                      |  208 ++++-
 log/register.html                 |   15 +-
 log/reset-password.html           |   79 ++
 log/verify-email.html             |   41 +
 nginx.conf                        |   14 +
 package-lock.json                 | 1365 ++++++++++++++++++++++++++++-
 package.json                      |   11 +
 requirements.txt                  |    4 +
 roleGuard.js                      |   30 +-
 server/config.js                  |   30 +
 server/db.js                      |   63 ++
 server/index.js                   |   23 +
 server/middleware/auth.js         |   14 +
 server/routes/api.js              |   37 +
 server/routes/auth.js             |  267 ++++++
 server/utils/email.js             |   51 ++
 server/utils/jwt.js               |   92 ++
 server/utils/password.js          |   25 +
 src/landing.js                    |    6 +
 src/main.js                       |    8 +-
 sw-register.js                    |   38 +
 sw.js                             |   24 +-
 vite.config.js => vite.config.mjs |   37 +-
 39 files changed, 2937 insertions(+), 197 deletions(-)
 create mode 100644 Dockerfile.auth
 create mode 100644 authApi.js
 create mode 100644 authConfig.js
 create mode 100644 docker/authConfig.js
 create mode 100644 log/forgot-password.html
 create mode 100644 log/reset-password.html
 create mode 100644 log/verify-email.html
 create mode 100644 server/config.js
 create mode 100644 server/db.js
 create mode 100644 server/index.js
 create mode 100644 server/middleware/auth.js
 create mode 100644 server/routes/api.js
 create mode 100644 server/routes/auth.js
 create mode 100644 server/utils/email.js
 create mode 100644 server/utils/jwt.js
 create mode 100644 server/utils/password.js
 create mode 100644 src/landing.js
 create mode 100644 sw-register.js
 rename vite.config.js => vite.config.mjs (54%)

diff --git a/.env.example b/.env.example
index d3183a4..d4a68bd 100644
--- a/.env.example
+++ b/.env.example
@@ -2,7 +2,7 @@
 # Copy this file to .env and fill in your actual values.
 # NEVER commit .env to version control.
 
-# Google Gemini AI API Key
+# Google Gemini AI API Key (optional for auth-only development)
 # Get your key at: https://aistudio.google.com/app/apikey
 GEMINI_API_KEY=your_gemini_api_key_here
 
@@ -14,3 +14,23 @@ GEMINI_MODEL=gemini-2.5-flash
 # Flask Configuration
 # Set to "true" only during local development — NEVER in production
 FLASK_DEBUG=false
+
+# Authentication (Node.js server — npm run auth)
+# Generate a strong secret: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+JWT_SECRET=change-me-to-a-long-random-secret
+JWT_EXPIRY_DAYS=7
+AUTH_PORT=5001
+
+# Database path for Node auth (SQLite)
+# Default: instance/learnsphere.db in the project root
+DATABASE_PATH=
+
+# App base URL for password reset and email verification links
+APP_BASE_URL=http://localhost:5173
+
+# Optional SMTP for email verification and password reset
+SMTP_HOST=
+SMTP_PORT=587
+SMTP_USER=
+SMTP_PASSWORD=
+SMTP_FROM=noreply@learnsphere.com
diff --git a/.gitignore b/.gitignore
index 96fa0a6..c822acc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -56,6 +56,12 @@ desktop.ini
 logs/
 *.log
 
+# ─────────────────────────────────────────────
+# Database
+# ─────────────────────────────────────────────
+instance/
+*.db
+
 # ─────────────────────────────────────────────
 # Misc
 # ─────────────────────────────────────────────
diff --git a/Dockerfile b/Dockerfile
index a581602..e420332 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,5 +13,6 @@ COPY --from=build /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf
 # Serve the same-origin chatbot config (browser talks to the nginx proxy).
 COPY docker/chatbotConfig.js /usr/share/nginx/html/chatbotConfig.js
+COPY docker/authConfig.js /usr/share/nginx/html/authConfig.js
 EXPOSE 80
 CMD ["nginx", "-g", "daemon off;"]
diff --git a/Dockerfile.auth b/Dockerfile.auth
new file mode 100644
index 0000000..6a0f52a
--- /dev/null
+++ b/Dockerfile.auth
@@ -0,0 +1,13 @@
+# Node.js auth server (npm run auth). Requires Node.js 22+ for built-in SQLite.
+FROM node:22-alpine
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm install --omit=dev
+
+COPY server ./server
+
+RUN mkdir -p instance
+
+EXPOSE 5001
+CMD ["node", "server/index.js"]
diff --git a/authApi.js b/authApi.js
new file mode 100644
index 0000000..db2a343
--- /dev/null
+++ b/authApi.js
@@ -0,0 +1,92 @@
+// authApi.js — shared authentication API helper for LearnSphere.
+// Auth runs on the Node.js server (see authConfig.js for AUTH_BASE_URL).
+
+window.AUTH_BASE_URL = window.AUTH_BASE_URL || "http://127.0.0.1:5001";
+
+window.authGetToken = function () {
+  return localStorage.getItem("authToken");
+};
+
+window.authSetSession = function (token, user) {
+  if (token) {
+    localStorage.setItem("authToken", token);
+  }
+  if (user) {
+    localStorage.setItem("user", JSON.stringify(user));
+  }
+  localStorage.setItem("isLoggedIn", "true");
+};
+
+window.authClearSession = function () {
+  localStorage.removeItem("authToken");
+  localStorage.removeItem("isLoggedIn");
+  localStorage.removeItem("user");
+};
+
+window.authIsLoggedIn = function () {
+  return Boolean(window.authGetToken()) && localStorage.getItem("isLoggedIn") === "true";
+};
+
+window.authFetch = async function (path, options = {}) {
+  const headers = {
+    "Content-Type": "application/json",
+    ...(options.headers || {}),
+  };
+
+  const token = window.authGetToken();
+  if (token) {
+    headers.Authorization = `Bearer ${token}`;
+  }
+
+  const response = await fetch(window.AUTH_BASE_URL + path, {
+    ...options,
+    headers,
+  });
+
+  const data = await response.json().catch(() => ({}));
+
+  if (!response.ok) {
+    throw new Error(data.error || `Server error: ${response.status}`);
+  }
+
+  return data;
+};
+
+window.authPost = function (path, payload) {
+  return window.authFetch(path, {
+    method: "POST",
+    body: JSON.stringify(payload || {}),
+  });
+};
+
+window.authRegister = function (name, email, password) {
+  return window.authPost("/api/auth/register", { name, email, password });
+};
+
+window.authLogin = function (email, password) {
+  return window.authPost("/api/auth/login", { email, password });
+};
+
+window.authLogout = async function () {
+  try {
+    if (window.authGetToken()) {
+      await window.authPost("/api/auth/logout", {});
+    }
+  } catch (error) {
+    console.warn("LearnSphere: logout request failed, clearing local session.", error);
+  } finally {
+    window.authClearSession();
+  }
+};
+
+window.authForgotPassword = function (email) {
+  return window.authPost("/api/auth/forgot-password", { email });
+};
+
+window.authResetPassword = function (token, password) {
+  return window.authPost("/api/auth/reset-password", { token, password });
+};
+
+window.authVerifyEmail = function (token) {
+  return window.authFetch(`/api/auth/verify-email?token=${encodeURIComponent(token)}`);
+};
diff --git a/authConfig.js b/authConfig.js
new file mode 100644
index 0000000..4b95b53
--- /dev/null
+++ b/authConfig.js
@@ -0,0 +1,10 @@
+// authConfig.js — LearnSphere auth API base URL (Node.js, default port 5001).
+// Vite dev (5173) uses same-origin + proxy; Docker uses docker/authConfig.js (AUTH_BASE_URL="").
+(function () {
+  if (window.AUTH_BASE_URL !== undefined && window.AUTH_BASE_URL !== null) {
+    return;
+  }
+  const port = window.location.port;
+  const isViteDev = port === "5173" || port === "4173";
+  window.AUTH_BASE_URL = isViteDev ? "" : "http://127.0.0.1:5001";
+})();
diff --git a/chatbot.py b/chatbot.py
index 742dabf..239cfa3 100644
--- a/chatbot.py
+++ b/chatbot.py
@@ -6,44 +6,37 @@
 from flask import Flask, request, jsonify, render_template
 from flask_cors import CORS
 from dotenv import load_dotenv
-from google import genai
 
-# Load the .env file (GEMINI_API_KEY, GEMINI_MODEL, etc.) before
-# reading any environment variables so `cp .env.example .env` just works.
+# Load the .env file before reading any environment variables.
 load_dotenv()
 
-# -----------------------------
-# Security: API key via env var
-# -----------------------------
-API_KEY = os.environ.get("GEMINI_API_KEY")
-
-if not API_KEY:
-    raise EnvironmentError(
-        "GEMINI_API_KEY environment variable is not set. "
-        "Set it before running the server."
-    )
-
 # -----------------------------
 # App setup
 # -----------------------------
 app = Flask(__name__, template_folder="templates", static_folder="static")
 CORS(app)
 
-# REST-based Gemini client (no gRPC dependency)
-client = genai.Client(api_key=API_KEY)
+# Auth runs on the Node.js server (server/index.js). This app is AI tutor only.
 
-# gemini-2.5-flash is a current, widely-available default; override via GEMINI_MODEL.
+# -----------------------------
+# Security: API key via env var
+# -----------------------------
+API_KEY = os.environ.get("GEMINI_API_KEY")
+client = None
 MODEL_NAME = os.environ.get("GEMINI_MODEL", "gemini-2.5-flash")
 
+if API_KEY:
+    from google import genai
+
+    client = genai.Client(api_key=API_KEY)
+
 
 # -----------------------------
 # Input/output hardening
 # -----------------------------
 MAX_MESSAGE_CHARS = int(os.environ.get("CHAT_MAX_MESSAGE_CHARS", "2000"))
 
-# Simple refusal/guardrail keywords (heuristic)
 ABUSE_KEYWORDS = [
-    # Prompt injection patterns
     "ignore previous",
     "disregard",
     "system prompt",
@@ -52,7 +45,6 @@
     "act as",
     "bypass",
     "reveal your instructions",
-    # Harmful/illegal categories (basic)
     "how to build a bomb",
     "make a bomb",
     "poison",
@@ -71,7 +63,6 @@ def format_response(text: str) -> str:
     """Return safe text for the frontend (no unsafe HTML)."""
     if text is None:
         return ""
-    # Escape HTML to prevent XSS; preserve line breaks.
     return html.escape(text).replace("\n", "<br>").strip()
 
 
@@ -82,6 +73,9 @@ def looks_like_abuse(user_text: str) -> bool:
 
 def generate_reply(prompt: str, fallback: str) -> str:
     """Call Gemini and return plain text, or `fallback` if no usable output."""
+    if client is None:
+        return fallback
+
     response = client.models.generate_content(model=MODEL_NAME, contents=prompt)
     text = (response.text or "").strip() if response is not None else ""
     return text if text else fallback
@@ -89,12 +83,10 @@ def generate_reply(prompt: str, fallback: str) -> str:
 
 # -----------------------------
 # Rate limiting (per IP)
-# In-memory sliding window.
 # -----------------------------
 RATE_LIMIT_WINDOW_SECONDS = int(os.environ.get("CHAT_RATE_LIMIT_WINDOW_SECONDS", "60"))
 RATE_LIMIT_COUNT = int(os.environ.get("CHAT_RATE_LIMIT_COUNT", "10"))
 
-# ip -> deque[timestamps]
 _requests = defaultdict(deque)
 
 
@@ -102,7 +94,6 @@ def rate_limited(ip: str) -> bool:
     now = time.time()
     q = _requests[ip]
 
-    # Drop old timestamps
     while q and (now - q[0]) > RATE_LIMIT_WINDOW_SECONDS:
         q.popleft()
 
@@ -120,6 +111,9 @@ def home():
 
 @app.route("/chat", methods=["POST"])
 def chat():
+    if client is None:
+        return jsonify({"error": "AI tutor is not configured (GEMINI_API_KEY missing)"}), 503
+
     data = request.get_json(silent=True)
 
     if not data or "message" not in data:
@@ -141,41 +135,36 @@ def chat():
             413,
         )
 
-    # Rate limit per IP
     ip = request.headers.get("X-Forwarded-For", request.remote_addr) or "unknown"
-    ip = ip.split(",")[0].strip()  # handle proxies lists
+    ip = ip.split(",")[0].strip()
 
     if rate_limited(ip):
         return jsonify({"error": "Too many requests. Please try again later."}), 429
 
-    # Basic abuse prevention / guardrails
     if looks_like_abuse(user_input):
         reply = (
-            "I can’t help with that request. "
-            "If you need help with a physics, maths, chemistry, or biology topic, tell me what concept you’re working on."
+            "I can't help with that request. "
+            "If you need help with a physics, maths, chemistry, or biology topic, tell me what concept you're working on."
         )
         return jsonify({"reply": format_response(reply)})
 
     try:
-        # Keep the model constrained to educational tutoring.
         system_guardrails = (
             "You are an educational tutor for Physics, Maths, Chemistry, and Biology. "
             "Be concise, step-by-step when useful, and avoid unsafe or illegal content. "
             "If the user asks for something unrelated, politely guide them back to learning topics."
         )
 
-        # Structured prompt (reduces injection impact)
         prompt = f"{system_guardrails}\n\nUser message: {user_input}"
 
         reply_text = generate_reply(
             prompt,
-            "I’m not sure how to respond to that. Can you try rephrasing?",
+            "I'm not sure how to respond to that. Can you try rephrasing?",
         )
 
         return jsonify({"reply": format_response(reply_text)})
 
     except Exception as e:
-        # Log internally but don't expose raw exception to the client
         print(f"[ERROR] Chatbot error: {e}")
         return (
             jsonify({"reply": "An error occurred while processing your request. Please try again later."}),
@@ -185,6 +174,9 @@ def chat():
 
 @app.route("/explain_mistake", methods=["POST"])
 def explain_mistake():
+    if client is None:
+        return jsonify({"error": "AI tutor is not configured (GEMINI_API_KEY missing)"}), 503
+
     data = request.get_json(silent=True)
 
     if not data:
@@ -198,7 +190,6 @@ def explain_mistake():
     if not question or not learner_answer or not correct_answer:
         return jsonify({"error": "Missing required fields (question, learnerAnswer, correctAnswer)"}), 400
 
-    # Rate limit per IP
     ip = request.headers.get("X-Forwarded-For", request.remote_addr) or "unknown"
     ip = ip.split(",")[0].strip()
 
@@ -206,7 +197,6 @@ def explain_mistake():
         return jsonify({"error": "Too many requests. Please try again later."}), 429
 
     try:
-        # Structured prompt instructing the model to explain the concept and give a follow-up question
         system_prompt = (
             "You are an educational tutor for Physics, Maths, Chemistry, and Biology. "
             "A learner made a mistake on a quiz. Please provide a targeted explanation including:\n"
@@ -242,4 +232,3 @@ def explain_mistake():
 if __name__ == "__main__":
     debug_mode = os.environ.get("FLASK_DEBUG", "false").lower() == "true"
     app.run(host="0.0.0.0", port=5000, debug=debug_mode)
-
diff --git a/docker-compose.yml b/docker-compose.yml
index 6ea675c..65c6c0f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,12 +6,31 @@ services:
       - "8080:80"
     depends_on:
       - chatbot
+      - auth
+
+  auth:
+    build:
+      context: .
+      dockerfile: Dockerfile.auth
+    environment:
+      JWT_SECRET: ${JWT_SECRET:-change-me-in-production}
+      JWT_EXPIRY_DAYS: ${JWT_EXPIRY_DAYS:-7}
+      APP_BASE_URL: ${APP_BASE_URL:-http://localhost:8080}
+      SMTP_HOST: ${SMTP_HOST:-}
+      SMTP_PORT: ${SMTP_PORT:-587}
+      SMTP_USER: ${SMTP_USER:-}
+      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
+      SMTP_FROM: ${SMTP_FROM:-noreply@learnsphere.com}
+    volumes:
+      - auth_data:/app/instance
 
   chatbot:
     build:
       context: .
       dockerfile: Dockerfile.chatbot
     environment:
-      # Set GEMINI_API_KEY in your .env file (see .env.example)
       GEMINI_API_KEY: ${GEMINI_API_KEY:-}
-      GEMINI_MODEL: ${GEMINI_MODEL:-gemini-2.5-flash}
\ No newline at end of file
+      GEMINI_MODEL: ${GEMINI_MODEL:-gemini-2.5-flash}
+
+volumes:
+  auth_data:
diff --git a/docker/authConfig.js b/docker/authConfig.js
new file mode 100644
index 0000000..6beb898
--- /dev/null
+++ b/docker/authConfig.js
@@ -0,0 +1,2 @@
+// Same-origin auth API when served behind the nginx container proxy.
+window.AUTH_BASE_URL = "";
diff --git a/home.css b/home.css
index 016218d..0f51a3d 100644
--- a/home.css
+++ b/home.css
@@ -91,3 +91,51 @@ button:hover, .logout-button:hover {
     background-color: var(--btn-secondary-hover);
 }
 
+.dashboard-top-bar {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    padding: 14px 20px;
+    border-bottom: 1px solid var(--border-color);
+    background: var(--navbar-bg);
+    backdrop-filter: blur(8px);
+}
+
+.dashboard-brand {
+    color: var(--logo-color);
+    font-weight: 700;
+    font-size: 1.1rem;
+    text-decoration: none;
+}
+
+.dashboard-top-actions {
+    display: flex;
+    align-items: center;
+    gap: 12px;
+}
+
+.dashboard-user {
+    font-size: 0.9rem;
+    color: var(--text-muted);
+    max-width: 160px;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+}
+
+.dashboard-theme-btn {
+    background: var(--btn-secondary-bg);
+    color: var(--text-color);
+    border: 1px solid var(--border-color);
+    border-radius: 8px;
+    padding: 8px 12px;
+    cursor: pointer;
+    font-size: 0.85rem;
+}
+
+.dashboard-container {
+    max-width: 900px;
+    margin: 0 auto;
+    padding: 0 16px 32px;
+}
+
diff --git a/home.html b/home.html
index e70d9ae..b02b4c5 100644
--- a/home.html
+++ b/home.html
@@ -234,9 +234,17 @@
 </head>
 <body>
 
+    <header class="dashboard-top-bar">
+        <a class="dashboard-brand" href="index.html">LearnSphere</a>
+        <div class="dashboard-top-actions">
+            <span id="dashboardUserName" class="dashboard-user"></span>
+            <button type="button" id="themeToggleBtn" class="dashboard-theme-btn" aria-label="Toggle theme"></button>
+        </div>
+    </header>
+
     <div class="dashboard-container">
         <div style="display: flex; justify-content: center; align-items: center; gap: 12px; margin-top: 10px; flex-wrap: wrap;">
-            <h1 class="title" style="margin: 0;">Welcome to LearnSphere</h1>
+            <h1 class="title" style="margin: 0;">Welcome back</h1>
             <div id="headerStreakBadge" style="display: inline-flex; align-items: center; gap: 6px; background: rgba(255, 69, 0, 0.1); border: 1px solid rgba(255, 69, 0, 0.35); padding: 6px 14px; border-radius: 20px; font-weight: 700; color: #ff4500; font-size: 0.9rem; vertical-align: middle; box-shadow: 0 4px 15px rgba(255, 69, 0, 0.15); transition: transform 0.2s;">
                 🔥 <span id="headerStreakCount">0</span> Day Streak
             </div>
@@ -309,7 +317,7 @@ <h2 id="badges-heading">🏅 Achievements & Badges</h2>
                     <span style="font-size: 1.05rem; font-weight: 700; color: var(--accent-color); display: flex; align-items: center; gap: 6px;">
                         <span>🔥</span> Daily Practice Streak
                     </span>
-                    <span id="streakDaysText" style="font-size: 1.1rem; font-weight: 800; color: #fff;">0 Days</span>
+                    <span id="streakDaysText" style="font-size: 1.1rem; font-weight: 800; color: var(--text-color);">0 Days</span>
                 </div>
                 <div class="progress-bar-track" style="margin-top: 12px; height: 10px; background: rgba(255,255,255,0.06); border-radius: 5px; overflow: hidden;">
                     <div id="streakProgressBarFill" style="height: 100%; width: 0%; background: linear-gradient(90deg, #ff8c00, #ff4500); border-radius: 5px; transition: width 0.5s ease;"></div>
@@ -368,7 +376,6 @@ <h2 id="chatbot-heading">🤖 Ask Your AI Tutor</h2>
         </section>
 
         <div class="footer-actions" style="margin-top: 30px; display: flex; justify-content: center; gap: 15px; align-items: center; flex-wrap: wrap;">
-            <button id="themeToggleBtn" class="theme-btn" aria-label="Toggle theme" style="background: var(--btn-secondary-bg); color: var(--text-color); border: 1px solid var(--border-color); padding: 10px 15px; border-radius: 5px; cursor: pointer; font-size: 1rem; font-weight: bold; transition: var(--theme-transition);"></button>
 
             <!-- Accessibility controls (keyboard accessible, persistent via accessibility.js) -->
             <div role="group" aria-label="Accessibility options" style="display:flex; gap:10px;">
@@ -401,6 +408,8 @@ <h2 id="chatbot-heading">🤖 Ask Your AI Tutor</h2>
 
     <script src="progress.js"></script>
     <script src="chatbotConfig.js"></script>
+    <script src="authConfig.js"></script>
+    <script src="authApi.js"></script>
     <script src="chatbotApi.js"></script>
     <script src="review.js"></script>
     <script src="quizProgress.js"></script>
@@ -456,15 +465,8 @@ <h2 id="reviewModalTitle" style="margin:0;">Review</h2>
         }
       })();
 
-      (function () {
-        if (!('serviceWorker' in navigator)) return;
-        window.addEventListener('load', function () {
-          navigator.serviceWorker.register('/sw.js').catch(function (err) {
-            console.warn('LearnSphere: Service Worker registration failed:', err);
-          });
-        });
-      })();
     </script>
+    <script src="/sw-register.js"></script>
 </body>
 </html>
 
diff --git a/home.js b/home.js
index 4079a2b..3d76843 100644
--- a/home.js
+++ b/home.js
@@ -5,11 +5,41 @@
  * XSS-safe: all user input is sanitized before being inserted into the DOM.
  */
 
+// ── Auth gate & user greeting ─────────────────────────────────────────────────
+document.addEventListener("DOMContentLoaded", () => {
+    if (window.authIsLoggedIn && !window.authIsLoggedIn()) {
+        window.location.href = "log/login.html";
+        return;
+    }
+
+    const userRaw = localStorage.getItem("user");
+    if (userRaw) {
+        try {
+            const user = JSON.parse(userRaw);
+            const nameEl = document.getElementById("dashboardUserName");
+            if (nameEl && user.name) {
+                nameEl.textContent = user.name;
+            }
+        } catch {
+            /* ignore invalid JSON */
+        }
+    }
+});
+
 // ── Logout ────────────────────────────────────────────────────────────────────
-document.getElementById("logoutButton").addEventListener("click", function () {
-    localStorage.removeItem("isLoggedIn");
+const logoutButton = document.getElementById("logoutButton");
+if (logoutButton) {
+    logoutButton.addEventListener("click", async function () {
+    if (window.authLogout) {
+        await window.authLogout();
+    } else {
+        localStorage.removeItem("isLoggedIn");
+        localStorage.removeItem("authToken");
+        localStorage.removeItem("user");
+    }
     window.location.href = "index.html";
-});
+    });
+}
 
 // ── XSS Sanitisation Helper ───────────────────────────────────────────────────
 /**
diff --git a/index.html b/index.html
index 275a469..a30f748 100644
--- a/index.html
+++ b/index.html
@@ -3,6 +3,24 @@
 
 <head>
     <meta charset="UTF-8">
+    <script>
+      (function () {
+        if (!('serviceWorker' in navigator)) return;
+        var port = location.port;
+        if (port !== '5173' && port !== '4173') return;
+        navigator.serviceWorker.getRegistrations().then(function (regs) {
+          regs.forEach(function (reg) { reg.unregister(); });
+        });
+        if (window.caches && caches.keys) {
+          caches.keys().then(function (keys) {
+            keys.forEach(function (key) {
+              if (key.indexOf('learnsphere-') === 0) caches.delete(key);
+            });
+          });
+        }
+      })();
+    </script>
+    <script src="/sw-register.js"></script>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="description" content="LearnSphere – An AI-powered educational platform providing world-class education to everyone, anywhere.">
 
@@ -22,10 +40,10 @@
     <meta name="twitter:description" content="An AI-powered educational platform providing world-class education to everyone, anywhere.">
     <meta name="twitter:image" content="https://learnsphere.com/student.png">
 
-    <link rel="stylesheet" href="variables.css">
+    <link rel="stylesheet" href="/variables.css">
     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css">
-    <script src="theme.js" defer></script>
-    <link rel="stylesheet" href="styles.css">
+    <script src="/theme.js" defer></script>
+    <link rel="stylesheet" href="/styles.css">
     <link rel="manifest" href="manifest.json">
     <link rel="apple-touch-icon" href="/student.png">
     <meta name="theme-color" content="#0f1115">
@@ -89,7 +107,7 @@
 
         <div class="buttons">
             <button class="login"><a href="log/login.html">Log in</a></button>
-            <button class="signup"><a href="log/register.html">Sign up</a></button>
+            <!-- <button class="signup"><a href="log/register.html">Sign up</a></button> -->
         </div>
     </header>
 
@@ -188,31 +206,20 @@ <h2>Ready to start learning?</h2>
         </section>
     </main>
 
-    <script type="module" src="./src/main.js" defer></script>
+    <script type="module" src="./src/landing.js"></script>
 
 
 
     <script>
       (function () {
-        // Offline banner
         const banner = document.getElementById('offline-banner');
         function updateBanner() {
           if (!banner) return;
-          const isOnline = navigator.onLine;
-          banner.style.display = isOnline ? 'none' : 'block';
+          banner.style.display = navigator.onLine ? 'none' : 'block';
         }
-
         window.addEventListener('online', updateBanner);
         window.addEventListener('offline', updateBanner);
         updateBanner();
-
-        // Service Worker registration
-        if (!('serviceWorker' in navigator)) return;
-        window.addEventListener('load', function () {
-          navigator.serviceWorker.register('/sw.js').catch(function (err) {
-            console.warn('LearnSphere: Service Worker registration failed:', err);
-          });
-        });
       })();
     </script>
 
diff --git a/log/forgot-password.html b/log/forgot-password.html
new file mode 100644
index 0000000..8b8b595
--- /dev/null
+++ b/log/forgot-password.html
@@ -0,0 +1,57 @@
+<!DOCTYPE html>

+<html lang="en">

+<head>

+    <meta charset="UTF-8">

+    <meta name="viewport" content="width=device-width, initial-scale=1.0">

+    <meta name="description" content="Reset your LearnSphere account password.">

+    <title>Forgot Password – LearnSphere</title>

+    <link rel="stylesheet" href="../variables.css">

+    <script src="../theme.js"></script>

+    <link rel="stylesheet" href="login.css">

+</head>

+<body class="auth-page">

+

+    <a class="auth-skip" href="#auth-main">Skip to form</a>

+    <header class="auth-top-bar">

+        <a class="auth-brand" href="../index.html">LearnSphere</a>

+        <button type="button" id="themeToggleBtn" class="auth-theme-btn" aria-label="Toggle theme"></button>

+    </header>

+

+    <main id="auth-main" class="auth-main" role="main">

+        <div class="auth-container" role="region" aria-labelledby="forgot-heading">

+            <h2 id="forgot-heading">Forgot Password</h2>

+            <p class="auth-subtitle">Enter your email and we'll send you a reset link.</p>

+

+            <div id="auth-message" role="alert" aria-live="polite" aria-atomic="true"></div>

+

+            <form id="forgotPasswordForm" novalidate>

+                <div class="form-group">

+                    <label for="email">Email Address</label>

+                    <input

+                        type="email"

+                        id="email"

+                        name="email"

+                        placeholder="Enter your email"

+                        required

+                        autocomplete="email"

+                        aria-required="true"

+                    >

+                </div>

+

+                <button type="submit" class="auth-button" id="forgotSubmitBtn">

+                    Send Reset Link

+                </button>

+

+                <p class="switch-auth">

+                    Remember your password?

+                    <a href="login.html">Back to login</a>

+                </p>

+            </form>

+        </div>

+    </main>

+

+    <script src="../authConfig.js"></script>

+    <script src="../authApi.js"></script>

+    <script src="login.js"></script>

+</body>

+</html>

diff --git a/log/login.css b/log/login.css
index 516607b..3b00899 100644
--- a/log/login.css
+++ b/log/login.css
@@ -2,20 +2,77 @@
   box-sizing: border-box;
 }
 
-body {
+body.auth-page {
   background: var(--bg-gradient);
   color: var(--text-color);
-  font-family: 'Poppins', 'Inter', 'Arial', sans-serif;
-  text-align: center;
+  font-family: 'Poppins', 'Inter', 'Segoe UI', Arial, sans-serif;
   margin: 0;
   padding: 0;
+  min-height: 100vh;
+  transition: var(--theme-transition);
+}
+
+.auth-skip {
+  position: absolute;
+  left: -9999px;
+  top: auto;
+}
+
+.auth-skip:focus {
+  left: 16px;
+  top: 16px;
+  z-index: 100;
+  background: var(--card-bg);
+  color: var(--text-color);
+  padding: 8px 12px;
+  border-radius: 6px;
+}
+
+.auth-top-bar {
   display: flex;
-  justify-content: center;
   align-items: center;
-  min-height: 100vh;
+  justify-content: space-between;
+  padding: 16px 24px;
+  max-width: 480px;
+  margin: 0 auto;
+}
+
+.auth-brand {
+  color: var(--logo-color);
+  font-weight: 700;
+  font-size: 1.15rem;
+  text-decoration: none;
+  letter-spacing: 0.02em;
+}
+
+.auth-brand:hover,
+.auth-brand:focus-visible {
+  text-decoration: underline;
+  outline: none;
+}
+
+.auth-theme-btn {
+  background: var(--btn-secondary-bg);
+  color: var(--text-color);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  padding: 8px 12px;
+  cursor: pointer;
+  font-size: 0.85rem;
   transition: var(--theme-transition);
 }
 
+.auth-theme-btn:hover {
+  background: var(--btn-secondary-hover);
+}
+
+.auth-main {
+  display: flex;
+  justify-content: center;
+  align-items: flex-start;
+  padding: 8px 16px 40px;
+}
+
 /* ── Accessibility: Screen-reader only text ───────────────────────────────── */
 .sr-only {
   position: absolute;
@@ -32,11 +89,12 @@ body {
 /* ── Auth Container ───────────────────────────────────────────────────────── */
 .auth-container {
   background: var(--card-bg);
-  padding: 30px;
-  border-radius: 10px;
+  padding: 28px 26px 26px;
+  border-radius: 12px;
   box-shadow: var(--card-shadow);
   border: 1px solid var(--card-border);
-  width: 350px;
+  width: 100%;
+  max-width: 400px;
   text-align: center;
   animation: fadeIn 0.5s ease-out;
   transition: var(--theme-transition);
@@ -45,7 +103,7 @@ body {
 @keyframes fadeIn {
   from {
     opacity: 0;
-    transform: translateY(-20px);
+    transform: translateY(-12px);
   }
   to {
     opacity: 1;
@@ -53,14 +111,51 @@ body {
   }
 }
 
-/* ── Heading ──────────────────────────────────────────────────────────────── */
 h2 {
-  font-size: 1.8rem;
-  margin-bottom: 15px;
+  font-size: 1.65rem;
+  margin: 0 0 8px;
   text-shadow: var(--hero-title-shadow);
   transition: var(--theme-transition);
 }
 
+/* ── Alerts ───────────────────────────────────────────────────────────────── */
+#auth-message:empty {
+  display: none;
+}
+
+.auth-alert {
+  display: block;
+  margin: 0 0 16px;
+  padding: 10px 12px;
+  border-radius: 8px;
+  font-size: 0.9rem;
+  font-weight: 600;
+  text-align: left;
+  line-height: 1.4;
+}
+
+.auth-alert--error {
+  background: rgba(239, 68, 68, 0.12);
+  border: 1px solid rgba(239, 68, 68, 0.35);
+  color: #fca5a5;
+}
+
+[data-theme='light'] .auth-alert--error {
+  color: #b91c1c;
+  background: rgba(239, 68, 68, 0.08);
+}
+
+.auth-alert--success {
+  background: rgba(16, 185, 129, 0.12);
+  border: 1px solid rgba(16, 185, 129, 0.35);
+  color: #6ee7b7;
+}
+
+[data-theme='light'] .auth-alert--success {
+  color: #047857;
+  background: rgba(16, 185, 129, 0.08);
+}
+
 /* ── Form Groups ──────────────────────────────────────────────────────────── */
 .form-group {
   margin-bottom: 16px;
@@ -69,15 +164,15 @@ h2 {
 
 label {
   display: block;
-  font-weight: bold;
+  font-weight: 600;
   margin-bottom: 6px;
-  font-size: 0.95rem;
+  font-size: 0.9rem;
 }
 
 input {
   width: 100%;
-  padding: 10px 12px;
-  border-radius: 5px;
+  padding: 11px 12px;
+  border-radius: 8px;
   border: 1px solid var(--border-color);
   background: var(--progress-item-bg);
   color: var(--text-color);
@@ -91,14 +186,13 @@ input {
 input:focus {
   outline: none;
   border-color: var(--accent-color);
-  box-shadow: 0 0 0 3px var(--glass-border);
+  box-shadow: 0 0 0 3px rgba(56, 189, 248, 0.25);
 }
 
 input::placeholder {
   color: var(--text-muted);
 }
 
-/* ── Password field with toggle button ───────────────────────────────────── */
 .input-wrapper {
   position: relative;
   display: flex;
@@ -106,7 +200,7 @@ input::placeholder {
 }
 
 .input-wrapper input {
-  padding-right: 44px; /* Space for toggle button */
+  padding-right: 44px;
 }
 
 .toggle-password {
@@ -118,7 +212,7 @@ input::placeholder {
   font-size: 1.1rem;
   padding: 4px 6px;
   border-radius: 4px;
-  color: rgba(255, 255, 255, 0.7);
+  color: var(--text-muted);
   transition: color 0.2s ease;
   line-height: 1;
 }
@@ -130,52 +224,86 @@ input::placeholder {
   outline-offset: 2px;
 }
 
-/* ── Submit Button ────────────────────────────────────────────────────────── */
 .auth-button {
   width: 100%;
   background: var(--btn-primary-bg);
-  color: white;
+  color: #fff;
   padding: 12px;
   border: none;
   border-radius: 8px;
   font-size: 1rem;
+  font-weight: 600;
   cursor: pointer;
   transition:
     var(--theme-transition),
     transform 0.2s ease;
-  margin-top: 4px;
+  margin-top: 6px;
 }
 
-.auth-button:hover {
+.auth-button:hover:not(:disabled) {
   background: var(--btn-primary-hover);
 }
 
 .auth-button:focus-visible {
-  outline: 3px solid cyan;
+  outline: 3px solid var(--accent-color);
   outline-offset: 3px;
 }
 
-.auth-button:active {
+.auth-button:active:not(:disabled) {
   transform: scale(0.98);
 }
 
-/* ── Switch auth link ─────────────────────────────────────────────────────── */
+.auth-button:disabled {
+  opacity: 0.65;
+  cursor: not-allowed;
+}
+
+.auth-subtitle {
+  font-size: 0.9rem;
+  color: var(--text-muted);
+  margin: 0 0 18px;
+  line-height: 1.45;
+}
+
+.forgot-password-link {
+  margin: 4px 0 12px;
+  font-size: 0.85rem;
+  text-align: right;
+}
+
+.forgot-password-link a {
+  color: var(--accent-color);
+  text-decoration: none;
+}
+
+.forgot-password-link a:hover,
+.forgot-password-link a:focus {
+  text-decoration: underline;
+}
+
 .switch-auth {
-  margin-top: 14px;
+  margin-top: 16px;
   font-size: 0.9rem;
-  color: rgba(255, 255, 255, 0.75);
+  color: var(--text-muted);
 }
 
 .switch-auth a {
-  color: #00d4ff;
+  color: var(--accent-color);
   text-decoration: none;
-  font-weight: bold;
+  font-weight: 600;
 }
 
 .switch-auth a:hover,
 .switch-auth a:focus {
   text-decoration: underline;
-  outline: 2px solid #00d4ff;
-  outline-offset: 2px;
-  border-radius: 2px;
+}
+
+@media (max-width: 480px) {
+  .auth-top-bar {
+    padding: 12px 16px;
+  }
+
+  .auth-container {
+    padding: 22px 18px;
+  }
 }
diff --git a/log/login.html b/log/login.html
index 3f6565b..7427443 100644
--- a/log/login.html
+++ b/log/login.html
@@ -9,14 +9,19 @@
     <script src="../theme.js"></script>
     <link rel="stylesheet" href="login.css">
 </head>
-<body>
+<body class="auth-page">
 
-    <main role="main">
+    <a class="auth-skip" href="#auth-main">Skip to form</a>
+    <header class="auth-top-bar">
+        <a class="auth-brand" href="../index.html">LearnSphere</a>
+        <button type="button" id="themeToggleBtn" class="auth-theme-btn" aria-label="Toggle theme"></button>
+    </header>
+
+    <main id="auth-main" class="auth-main" role="main">
         <div class="auth-container" role="region" aria-labelledby="login-heading">
             <h2 id="login-heading">Login to LearnSphere</h2>
 
-            <!-- Inline error/success messages injected by login.js -->
-            <div id="auth-message" role="alert" aria-live="assertive" aria-atomic="true"></div>
+            <div id="auth-message" role="alert" aria-live="polite" aria-atomic="true"></div>
 
             <form
                 id="loginForm"
@@ -60,6 +65,10 @@ <h2 id="login-heading">Login to LearnSphere</h2>
                     </div>
                 </div>
 
+                <p class="forgot-password-link">
+                    <a href="forgot-password.html">Forgot your password?</a>
+                </p>
+
                 <button type="submit" class="auth-button" id="loginSubmitBtn">
                     Log In
                 </button>
@@ -71,7 +80,8 @@ <h2 id="login-heading">Login to LearnSphere</h2>
             </form>
         </div>
     </main>
-
+    <script src="../authConfig.js"></script>
+    <script src="../authApi.js"></script>
     <script src="login.js"></script>
     <script>
         // Password visibility toggle
diff --git a/log/login.js b/log/login.js
index bf80fad..06aa7f4 100644
--- a/log/login.js
+++ b/log/login.js
@@ -1,59 +1,61 @@
 /**
  * login.js — LearnSphere Authentication Logic
  *
- * Handles login and registration form submission using localStorage.
- * Note: This is a client-side demo implementation. In production,
- * authentication must be handled server-side with hashed passwords
- * and proper session management.
+ * Handles login, registration, and password reset via the Node.js auth API.
+ * JWT tokens are stored in localStorage; passwords are never stored client-side.
  */
 
 document.addEventListener('DOMContentLoaded', () => {
   const loginForm = document.getElementById('loginForm');
   const registerForm = document.getElementById('registerForm');
+  const forgotForm = document.getElementById('forgotPasswordForm');
+  const resetForm = document.getElementById('resetPasswordForm');
+  const verifyBtn = document.getElementById('verifyEmailBtn');
 
-  // BUG FIX: localStorage always returns strings, never booleans.
-  // Previously: localStorage.getItem("isLoggedIn") === true  → always false
-  // Fixed:      localStorage.getItem("isLoggedIn") === "true" → correct
   if (
     window.location.pathname.includes('login.html') &&
-    localStorage.getItem('isLoggedIn') === 'true'
+    window.authIsLoggedIn &&
+    window.authIsLoggedIn()
   ) {
     window.location.href = '../home.html';
-    return; // Prevent further execution after redirect
+    return;
   }
 
-  // ── Login Form ──────────────────────────────────────────────────
   if (loginForm) {
-    loginForm.addEventListener('submit', e => {
+    loginForm.addEventListener('submit', async e => {
       e.preventDefault();
 
       const email = document.getElementById('email').value.trim();
       const password = document.getElementById('password').value;
+      const submitBtn = document.getElementById('loginSubmitBtn');
 
       if (!email || !password) {
         showError('Please fill in all fields.');
         return;
       }
 
-      const storedUser = JSON.parse(localStorage.getItem('user'));
+      setLoading(submitBtn, true);
 
-      if (storedUser && storedUser.email === email && storedUser.password === password) {
-        localStorage.setItem('isLoggedIn', 'true'); // Store as string "true"
+      try {
+        const data = await window.authLogin(email, password);
+        window.authSetSession(data.token, data.user);
         window.location.href = '../home.html';
-      } else {
-        showError('Invalid email or password. Please try again.');
+      } catch (error) {
+        showError(error.message || 'Login failed. Please try again.');
+      } finally {
+        setLoading(submitBtn, false);
       }
     });
   }
 
-  // ── Registration Form ────────────────────────────────────────────
   if (registerForm) {
-    registerForm.addEventListener('submit', e => {
+    registerForm.addEventListener('submit', async e => {
       e.preventDefault();
 
       const fullname = document.getElementById('fullname').value.trim();
       const email = document.getElementById('email').value.trim();
       const password = document.getElementById('password').value;
+      const submitBtn = document.getElementById('registerSubmitBtn');
 
       if (!fullname || !email || !password) {
         showError('Please fill out all fields.');
@@ -65,52 +67,172 @@ document.addEventListener('DOMContentLoaded', () => {
         return;
       }
 
-      const user = { fullname, email, password };
-      localStorage.setItem('user', JSON.stringify(user));
+      setLoading(submitBtn, true);
 
-      // Show success before redirecting
-      showSuccess('Account created! Redirecting to login...');
-      setTimeout(() => {
-        window.location.href = 'login.html';
-      }, 1500);
+      try {
+        const data = await window.authRegister(fullname, email, password);
+        if (!data.email_verification_sent) {
+          showError(data.error || 'Account created, but the verification email could not be sent.');
+          return;
+        }
+        showSuccess(data.message || 'Account created. Check your email to verify your account, then log in.');
+        setTimeout(() => {
+          window.location.href = 'login.html';
+        }, 2000);
+      } catch (error) {
+        showError(error.message || 'Registration failed. Please try again.');
+      } finally {
+        setLoading(submitBtn, false);
+      }
+    });
+  }
+
+  if (forgotForm) {
+    forgotForm.addEventListener('submit', async e => {
+      e.preventDefault();
+
+      const email = document.getElementById('email').value.trim();
+      const submitBtn = document.getElementById('forgotSubmitBtn');
+
+      if (!email) {
+        showError('Please enter your email address.');
+        return;
+      }
+
+      setLoading(submitBtn, true);
+
+      try {
+        const data = await window.authForgotPassword(email);
+        showSuccess(data.message || 'A password reset link has been sent to your email.');
+        forgotForm.reset();
+      } catch (error) {
+        showError(error.message || 'Unable to send reset link. Please try again.');
+      } finally {
+        setLoading(submitBtn, false);
+      }
+    });
+  }
+
+  if (resetForm) {
+    const tokenInput = document.getElementById('resetToken');
+    const urlToken = new URLSearchParams(window.location.search).get('token');
+    if (tokenInput && urlToken) {
+      tokenInput.value = urlToken;
+    }
+
+    resetForm.addEventListener('submit', async e => {
+      e.preventDefault();
+
+      const token = document.getElementById('resetToken').value.trim();
+      const password = document.getElementById('password').value;
+      const submitBtn = document.getElementById('resetSubmitBtn');
+
+      if (!token || !password) {
+        showError('Please fill in all fields.');
+        return;
+      }
+
+      if (password.length < 6) {
+        showError('Password must be at least 6 characters.');
+        return;
+      }
+
+      setLoading(submitBtn, true);
+
+      try {
+        const data = await window.authResetPassword(token, password);
+        showSuccess(data.message || 'Password reset successfully. Redirecting to login...');
+        setTimeout(() => {
+          window.location.href = 'login.html';
+        }, 2000);
+      } catch (error) {
+        showError(error.message || 'Unable to reset password. Please try again.');
+      } finally {
+        setLoading(submitBtn, false);
+      }
+    });
+  }
+
+  if (verifyBtn) {
+    const urlToken = new URLSearchParams(window.location.search).get('token');
+    if (!urlToken) {
+      showError('No verification token found in the link.');
+      return;
+    }
+
+    verifyBtn.addEventListener('click', async () => {
+      setLoading(verifyBtn, true);
+
+      try {
+        const data = await window.authVerifyEmail(urlToken);
+        showSuccess(data.message || 'Email verified successfully!');
+        verifyBtn.style.display = 'none';
+      } catch (error) {
+        showError(error.message || 'Verification failed. The link may have expired.');
+      } finally {
+        setLoading(verifyBtn, false);
+      }
     });
   }
 });
 
-/**
- * Displays an inline error message instead of using alert().
- * @param {string} message
- */
+function setLoading(button, isLoading) {
+  if (!button) return;
+  button.disabled = isLoading;
+  if (isLoading) {
+    button.dataset.originalText = button.textContent;
+    button.textContent = 'Please wait...';
+  } else if (button.dataset.originalText) {
+    button.textContent = button.dataset.originalText;
+  }
+}
+
 function showError(message) {
+  const host = document.getElementById('auth-message');
+  if (host) {
+    host.className = 'auth-alert auth-alert--error';
+    host.textContent = message;
+    host.hidden = false;
+    return;
+  }
+
   let errorEl = document.getElementById('auth-error');
   if (!errorEl) {
     errorEl = document.createElement('p');
     errorEl.id = 'auth-error';
+    errorEl.className = 'auth-alert auth-alert--error';
     errorEl.setAttribute('role', 'alert');
-    errorEl.setAttribute('aria-live', 'assertive');
-    errorEl.style.cssText = 'color:#ff6b6b;font-size:0.9rem;margin-top:10px;font-weight:bold;';
-    const form = document.querySelector('form');
-    if (form) form.appendChild(errorEl);
+    const container = document.querySelector('.auth-container');
+    if (container) container.prepend(errorEl);
   }
   errorEl.textContent = message;
-  errorEl.style.display = 'block';
+  errorEl.hidden = false;
+
+  const successEl = document.getElementById('auth-success');
+  if (successEl) successEl.hidden = true;
 }
 
-/**
- * Displays an inline success message instead of using alert().
- * @param {string} message
- */
 function showSuccess(message) {
+  const host = document.getElementById('auth-message');
+  if (host) {
+    host.className = 'auth-alert auth-alert--success';
+    host.textContent = message;
+    host.hidden = false;
+    return;
+  }
+
   let successEl = document.getElementById('auth-success');
   if (!successEl) {
     successEl = document.createElement('p');
     successEl.id = 'auth-success';
+    successEl.className = 'auth-alert auth-alert--success';
     successEl.setAttribute('role', 'status');
-    successEl.setAttribute('aria-live', 'polite');
-    successEl.style.cssText = 'color:#66fcf1;font-size:0.9rem;margin-top:10px;font-weight:bold;';
-    const form = document.querySelector('form');
-    if (form) form.appendChild(successEl);
+    const container = document.querySelector('.auth-container');
+    if (container) container.prepend(successEl);
   }
   successEl.textContent = message;
-  successEl.style.display = 'block';
+  successEl.hidden = false;
+
+  const errorEl = document.getElementById('auth-error');
+  if (errorEl) errorEl.hidden = true;
 }
diff --git a/log/register.html b/log/register.html
index 8530abc..120a2c7 100644
--- a/log/register.html
+++ b/log/register.html
@@ -9,14 +9,19 @@
     <script src="../theme.js"></script>
     <link rel="stylesheet" href="login.css">
 </head>
-<body>
+<body class="auth-page">
 
-    <main role="main">
+    <a class="auth-skip" href="#auth-main">Skip to form</a>
+    <header class="auth-top-bar">
+        <a class="auth-brand" href="../index.html">LearnSphere</a>
+        <button type="button" id="themeToggleBtn" class="auth-theme-btn" aria-label="Toggle theme"></button>
+    </header>
+
+    <main id="auth-main" class="auth-main" role="main">
         <div class="auth-container" role="region" aria-labelledby="register-heading">
             <h2 id="register-heading">Create an Account</h2>
 
-            <!-- Inline error/success messages injected by login.js -->
-            <div id="auth-message" role="alert" aria-live="assertive" aria-atomic="true"></div>
+            <div id="auth-message" role="alert" aria-live="polite" aria-atomic="true"></div>
 
             <form
                 id="registerForm"
@@ -86,6 +91,8 @@ <h2 id="register-heading">Create an Account</h2>
         </div>
     </main>
 
+    <script src="../authConfig.js"></script>
+    <script src="../authApi.js"></script>
     <script src="login.js"></script>
     <script>
         // Password visibility toggle
diff --git a/log/reset-password.html b/log/reset-password.html
new file mode 100644
index 0000000..1e7798b
--- /dev/null
+++ b/log/reset-password.html
@@ -0,0 +1,79 @@
+<!DOCTYPE html>

+<html lang="en">

+<head>

+    <meta charset="UTF-8">

+    <meta name="viewport" content="width=device-width, initial-scale=1.0">

+    <meta name="description" content="Set a new password for your LearnSphere account.">

+    <title>Reset Password – LearnSphere</title>

+    <link rel="stylesheet" href="../variables.css">

+    <script src="../theme.js"></script>

+    <link rel="stylesheet" href="login.css">

+</head>

+<body class="auth-page">

+

+    <a class="auth-skip" href="#auth-main">Skip to form</a>

+    <header class="auth-top-bar">

+        <a class="auth-brand" href="../index.html">LearnSphere</a>

+        <button type="button" id="themeToggleBtn" class="auth-theme-btn" aria-label="Toggle theme"></button>

+    </header>

+

+    <main id="auth-main" class="auth-main" role="main">

+        <div class="auth-container" role="region" aria-labelledby="reset-heading">

+            <h2 id="reset-heading">Reset Password</h2>

+            <p class="auth-subtitle">Enter your new password below.</p>

+

+            <div id="auth-message" role="alert" aria-live="polite" aria-atomic="true"></div>

+

+            <form id="resetPasswordForm" novalidate>

+                <input type="hidden" id="resetToken" name="token">

+

+                <div class="form-group">

+                    <label for="password">New Password</label>

+                    <div class="input-wrapper">

+                        <input

+                            type="password"

+                            id="password"

+                            name="password"

+                            placeholder="Enter new password (min. 6 characters)"

+                            required

+                            autocomplete="new-password"

+                            minlength="6"

+                            aria-required="true"

+                        >

+                        <button

+                            type="button"

+                            class="toggle-password"

+                            id="togglePassword"

+                            aria-label="Show password"

+                            aria-pressed="false"

+                        >👁</button>

+                    </div>

+                </div>

+

+                <button type="submit" class="auth-button" id="resetSubmitBtn">

+                    Reset Password

+                </button>

+

+                <p class="switch-auth">

+                    <a href="login.html">Back to login</a>

+                </p>

+            </form>

+        </div>

+    </main>

+

+    <script src="../authConfig.js"></script>

+    <script src="../authApi.js"></script>

+    <script src="login.js"></script>

+    <script>

+        const toggleBtn = document.getElementById("togglePassword");

+        const passwordInput = document.getElementById("password");

+

+        toggleBtn.addEventListener("click", () => {

+            const isVisible = passwordInput.type === "text";

+            passwordInput.type = isVisible ? "password" : "text";

+            toggleBtn.setAttribute("aria-pressed", (!isVisible).toString());

+            toggleBtn.setAttribute("aria-label", isVisible ? "Show password" : "Hide password");

+        });

+    </script>

+</body>

+</html>

diff --git a/log/verify-email.html b/log/verify-email.html
new file mode 100644
index 0000000..fa148a1
--- /dev/null
+++ b/log/verify-email.html
@@ -0,0 +1,41 @@
+<!DOCTYPE html>

+<html lang="en">

+<head>

+    <meta charset="UTF-8">

+    <meta name="viewport" content="width=device-width, initial-scale=1.0">

+    <meta name="description" content="Verify your LearnSphere email address.">

+    <title>Verify Email – LearnSphere</title>

+    <link rel="stylesheet" href="../variables.css">

+    <script src="../theme.js"></script>

+    <link rel="stylesheet" href="login.css">

+</head>

+<body class="auth-page">

+

+    <a class="auth-skip" href="#auth-main">Skip to form</a>

+    <header class="auth-top-bar">

+        <a class="auth-brand" href="../index.html">LearnSphere</a>

+        <button type="button" id="themeToggleBtn" class="auth-theme-btn" aria-label="Toggle theme"></button>

+    </header>

+

+    <main id="auth-main" class="auth-main" role="main">

+        <div class="auth-container" role="region" aria-labelledby="verify-heading">

+            <h2 id="verify-heading">Verify Your Email</h2>

+            <p class="auth-subtitle">Click the button below to confirm your email address.</p>

+

+            <div id="auth-message" role="alert" aria-live="polite" aria-atomic="true"></div>

+

+            <button type="button" class="auth-button" id="verifyEmailBtn">

+                Verify Email

+            </button>

+

+            <p class="switch-auth">

+                <a href="login.html">Back to login</a>

+            </p>

+        </div>

+    </main>

+

+    <script src="../authConfig.js"></script>

+    <script src="../authApi.js"></script>

+    <script src="login.js"></script>

+</body>

+</html>

diff --git a/nginx.conf b/nginx.conf
index 502f3ca..e3397c2 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -19,4 +19,18 @@ server {
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Real-IP $remote_addr;
     }
+
+    location /api/auth/ {
+        proxy_pass http://auth:5001/api/auth/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    location = /api/verify-permission {
+        proxy_pass http://auth:5001/api/verify-permission;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
 }
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index fabf5e1..2986332 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,7 +7,16 @@
     "": {
       "name": "learnsphere-2",
       "version": "1.0.0",
+      "dependencies": {
+        "bcryptjs": "^2.4.3",
+        "cors": "^2.8.5",
+        "dotenv": "^16.4.7",
+        "express": "^4.21.2",
+        "jsonwebtoken": "^9.0.2",
+        "nodemailer": "^6.10.0"
+      },
       "devDependencies": {
+        "concurrently": "^9.1.2",
         "eslint": "^10.9.1",
         "eslint-config-prettier": "^9.1.0",
         "eslint-plugin-prettier": "^5.1.3",
@@ -567,6 +576,19 @@
         "url": "https://opencollective.com/vitest"
       }
     },
+    "node_modules/accepts": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "~2.1.34",
+        "negotiator": "0.6.3"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/acorn": {
       "version": "8.18.0",
       "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz",
@@ -607,6 +629,38 @@
         "url": "https://github.com/sponsors/epoberezkin"
       }
     },
+    "node_modules/ansi-regex": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
+    "node_modules/array-flatten": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+      "license": "MIT"
+    },
     "node_modules/assertion-error": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
@@ -627,6 +681,51 @@
         "node": "18 || 20 || >=22"
       }
     },
+    "node_modules/bcryptjs": {
+      "version": "2.4.3",
+      "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz",
+      "integrity": "sha512-V/Hy/X9Vt7f3BbPJEi8BdVFMByHi+jNXrYkW3huaybV/kQ0KJg0Y6PkEMbn+zeT+i+SiKZ/HMqJGIIt4LZDqNQ==",
+      "license": "MIT"
+    },
+    "node_modules/body-parser": {
+      "version": "1.20.8",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.8.tgz",
+      "integrity": "sha512-JNcyFQ64OiijEkPzUBTCe+hyPXUD/3LEldGQ6iF5LR1w00mx9o7xtDWHXBY2iItjdCFGoilOLNQbH943ut7pHA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "content-type": "~1.0.5",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "~1.2.0",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "on-finished": "~2.4.1",
+        "qs": "~6.16.0",
+        "raw-body": "~2.5.3",
+        "type-is": "~1.6.18",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/body-parser/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/body-parser/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
     "node_modules/brace-expansion": {
       "version": "5.0.9",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
@@ -640,6 +739,50 @@
         "node": "20 || >=22"
       }
     },
+    "node_modules/buffer-equal-constant-time": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/chai": {
       "version": "6.2.2",
       "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
@@ -650,6 +793,149 @@
         "node": ">=18"
       }
     },
+    "node_modules/chalk": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
+      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.1.0",
+        "supports-color": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/chalk?sponsor=1"
+      }
+    },
+    "node_modules/chalk/node_modules/supports-color": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/cliui": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
+      "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.1",
+        "wrap-ansi": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/concurrently": {
+      "version": "9.2.4",
+      "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-9.2.4.tgz",
+      "integrity": "sha512-TZ0CEhyzvFjgtAvHTusDMgj7wNdihCh7LLLrzdUOXIhdlnL2JBBGA9eJxR24rtqgmdjh3OA3hrN1rCHj6HM8qA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "chalk": "4.1.2",
+        "rxjs": "7.8.2",
+        "shell-quote": "1.9.0",
+        "supports-color": "8.1.1",
+        "tree-kill": "1.2.2",
+        "yargs": "17.7.2"
+      },
+      "bin": {
+        "conc": "dist/bin/concurrently.js",
+        "concurrently": "dist/bin/concurrently.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/open-cli-tools/concurrently?sponsor=1"
+      }
+    },
+    "node_modules/content-disposition": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "5.2.1"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+      "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
+      "license": "MIT"
+    },
+    "node_modules/cors": {
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+      "license": "MIT",
+      "dependencies": {
+        "object-assign": "^4",
+        "vary": "^1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -690,6 +976,25 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/destroy": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
     "node_modules/detect-libc": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
@@ -700,6 +1005,81 @@
         "node": ">=8"
       }
     },
+    "node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/ecdsa-sig-formatter": {
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/emoji-regex": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/es-module-lexer": {
       "version": "2.3.2",
       "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz",
@@ -707,6 +1087,34 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+      "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/escalade": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
+      "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
     "node_modules/escape-string-regexp": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
@@ -955,6 +1363,15 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/expect-type": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz",
@@ -965,6 +1382,67 @@
         "node": ">=12.0.0"
       }
     },
+    "node_modules/express": {
+      "version": "4.22.3",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.3.tgz",
+      "integrity": "sha512-Bdcs4+3qlpVlx2NRn6fgX2Ue2/gGRaPeawebgclM0ERSCqDpA+owF1fdPwjJUTAJWMTuAaxjDf+hzb0/4eKvvw==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.8",
+        "array-flatten": "1.1.1",
+        "body-parser": "~1.20.5",
+        "content-disposition": "~0.5.4",
+        "content-type": "~1.0.4",
+        "cookie": "~0.7.1",
+        "cookie-signature": "~1.0.6",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "finalhandler": "~1.3.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.0",
+        "merge-descriptors": "1.0.3",
+        "methods": "~1.1.2",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "path-to-regexp": "~0.1.13",
+        "proxy-addr": "~2.0.7",
+        "qs": "~6.16.0",
+        "range-parser": "~1.2.1",
+        "safe-buffer": "5.2.1",
+        "send": "~0.19.0",
+        "serve-static": "~1.16.2",
+        "setprototypeof": "1.2.0",
+        "statuses": "~2.0.1",
+        "type-is": "~1.6.18",
+        "utils-merge": "1.0.1",
+        "vary": "~1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/express/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/express/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
     "node_modules/fast-deep-equal": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
@@ -1024,6 +1502,39 @@
         "node": ">=16.0.0"
       }
     },
+    "node_modules/finalhandler": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+      "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "statuses": "~2.0.2",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/finalhandler/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/finalhandler/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
     "node_modules/find-up": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz",
@@ -1062,6 +1573,24 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+      "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
@@ -1077,21 +1606,155 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
-    "node_modules/glob-parent": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
-      "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==",
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-caller-file": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
+      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
       "dev": true,
       "license": "ISC",
-      "dependencies": {
-        "is-glob": "^4.0.3"
-      },
       "engines": {
-        "node": ">=10.13.0"
+        "node": "6.* || 8.* || >= 10.*"
       }
     },
-    "node_modules/ignore": {
-      "version": "5.3.2",
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/glob-parent": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
+      "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/has-flag": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
+      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.4.24",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+      "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/ignore": {
+      "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
       "integrity": "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==",
       "dev": true,
@@ -1110,6 +1773,21 @@
         "node": ">=0.8.19"
       }
     },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
     "node_modules/is-extglob": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
@@ -1120,6 +1798,16 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/is-fullwidth-code-point": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
+      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/is-glob": {
       "version": "4.0.3",
       "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
@@ -1161,6 +1849,49 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/jsonwebtoken": {
+      "version": "9.0.3",
+      "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
+      "integrity": "sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==",
+      "license": "MIT",
+      "dependencies": {
+        "jws": "^4.0.1",
+        "lodash.includes": "^4.3.0",
+        "lodash.isboolean": "^3.0.3",
+        "lodash.isinteger": "^4.0.4",
+        "lodash.isnumber": "^3.0.3",
+        "lodash.isplainobject": "^4.0.6",
+        "lodash.isstring": "^4.0.1",
+        "lodash.once": "^4.0.0",
+        "ms": "^2.1.1",
+        "semver": "^7.5.4"
+      },
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      }
+    },
+    "node_modules/jwa": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
+      "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==",
+      "license": "MIT",
+      "dependencies": {
+        "buffer-equal-constant-time": "^1.0.1",
+        "ecdsa-sig-formatter": "1.0.11",
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/jws": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz",
+      "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==",
+      "license": "MIT",
+      "dependencies": {
+        "jwa": "^2.0.1",
+        "safe-buffer": "^5.0.1"
+      }
+    },
     "node_modules/keyv": {
       "version": "4.5.4",
       "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
@@ -1474,6 +2205,48 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/lodash.includes": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
+      "integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isboolean": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz",
+      "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isinteger": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
+      "integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isnumber": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz",
+      "integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isplainobject": {
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
+      "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isstring": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz",
+      "integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.once": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz",
+      "integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==",
+      "license": "MIT"
+    },
     "node_modules/magic-string": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.1.tgz",
@@ -1484,6 +2257,75 @@
         "@jridgewell/sourcemap-codec": "^1.6.0"
       }
     },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+      "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/merge-descriptors": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/methods": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+      "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "license": "MIT",
+      "bin": {
+        "mime": "cli.js"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
     "node_modules/minimatch": {
       "version": "10.2.6",
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
@@ -1504,7 +2346,6 @@
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/nanoid": {
@@ -1533,6 +2374,45 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/negotiator": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+      "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/nodemailer": {
+      "version": "6.10.1",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.10.1.tgz",
+      "integrity": "sha512-Z+iLaBGVaSjbIzQ4pX6XV41HrooLsQ10ZWPUehGmuantvzWoDVBnmsdUcOIDM1t+yPor5pDhVlDESgOMEGxhHA==",
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/object-assign": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/obug": {
       "version": "2.1.4",
       "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.4.tgz",
@@ -1547,6 +2427,18 @@
         "node": ">=12.20.0"
       }
     },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/optionator": {
       "version": "0.9.4",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
@@ -1597,6 +2489,15 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/path-exists": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
@@ -1617,6 +2518,12 @@
         "node": ">=8"
       }
     },
+    "node_modules/path-to-regexp": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+      "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+      "license": "MIT"
+    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -1705,6 +2612,23 @@
         "node": ">=6.0.0"
       }
     },
+    "node_modules/proxy-addr": {
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.8.tgz",
+      "integrity": "sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/punycode": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -1715,6 +2639,56 @@
         "node": ">=6"
       }
     },
+    "node_modules/qs": {
+      "version": "6.16.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
+      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "2.5.3",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+      "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/require-directory": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
+      "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/rolldown": {
       "version": "1.2.2",
       "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.2.tgz",
@@ -1748,6 +2722,114 @@
         "@rolldown/binding-win32-x64-msvc": "1.2.2"
       }
     },
+    "node_modules/rxjs": {
+      "version": "7.8.2",
+      "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz",
+      "integrity": "sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "tslib": "^2.1.0"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/send": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+      "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "1.2.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.1",
+        "mime": "1.6.0",
+        "ms": "2.1.3",
+        "on-finished": "~2.4.1",
+        "range-parser": "~1.2.1",
+        "statuses": "~2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/send/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/send/node_modules/debug/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/serve-static": {
+      "version": "1.16.3",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+      "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "parseurl": "~1.3.3",
+        "send": "~0.19.1"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
     "node_modules/shebang-command": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
@@ -1771,6 +2853,91 @@
         "node": ">=8"
       }
     },
+    "node_modules/shell-quote": {
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz",
+      "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/siginfo": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
@@ -1795,6 +2962,15 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/std-env": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.2.0.tgz",
@@ -1802,6 +2978,50 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/string-width": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "emoji-regex": "^8.0.0",
+        "is-fullwidth-code-point": "^3.0.0",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/strip-ansi": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/supports-color": {
+      "version": "8.1.1",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz",
+      "integrity": "sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-color?sponsor=1"
+      }
+    },
     "node_modules/synckit": {
       "version": "0.11.13",
       "resolved": "https://registry.npmjs.org/synckit/-/synckit-0.11.13.tgz",
@@ -1855,6 +3075,32 @@
         "url": "https://github.com/sponsors/SuperchupuDev"
       }
     },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
+    "node_modules/tree-kill": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz",
+      "integrity": "sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "tree-kill": "cli.js"
+      }
+    },
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "dev": true,
+      "license": "0BSD"
+    },
     "node_modules/type-check": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz",
@@ -1868,6 +3114,28 @@
         "node": ">= 0.8.0"
       }
     },
+    "node_modules/type-is": {
+      "version": "1.6.18",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+      "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+      "license": "MIT",
+      "dependencies": {
+        "media-typer": "0.3.0",
+        "mime-types": "~2.1.24"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/uri-js": {
       "version": "4.4.1",
       "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
@@ -1878,6 +3146,24 @@
         "punycode": "^2.1.0"
       }
     },
+    "node_modules/utils-merge": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+      "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4.0"
+      }
+    },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/vite": {
       "version": "8.2.0",
       "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.0.tgz",
@@ -2082,6 +3368,63 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/wrap-ansi": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
+      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "string-width": "^4.1.0",
+        "strip-ansi": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+      }
+    },
+    "node_modules/y18n": {
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
+      "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/yargs": {
+      "version": "17.7.2",
+      "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz",
+      "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cliui": "^8.0.1",
+        "escalade": "^3.1.1",
+        "get-caller-file": "^2.0.5",
+        "require-directory": "^2.1.1",
+        "string-width": "^4.2.3",
+        "y18n": "^5.0.5",
+        "yargs-parser": "^21.1.1"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/yargs-parser": {
+      "version": "21.1.1",
+      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz",
+      "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/yocto-queue": {
       "version": "0.1.0",
       "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
diff --git a/package.json b/package.json
index a95cc2b..ad9c55f 100644
--- a/package.json
+++ b/package.json
@@ -4,16 +4,27 @@
   "description": "LearnSphere front‑end with linting, formatting, and Vite bundling",
   "scripts": {
     "dev": "vite",
+    "auth": "node server/index.js",
+    "dev:full": "concurrently -n auth,vite -c cyan,green \"npm run auth\" \"npm run dev\"",
     "build": "vite build",
     "lint": "eslint src/**/*.js",
     "format": "prettier --write \"**/*.{js,css}\"",
     "test": "vitest run"
   },
+  "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.7",
+    "express": "^4.21.2",
+    "jsonwebtoken": "^9.0.2",
+    "nodemailer": "^6.10.0"
+  },
   "devDependencies": {
     "eslint": "^10.9.1",
     "eslint-config-prettier": "^9.1.0",
     "eslint-plugin-prettier": "^5.1.3",
     "prettier": "^3.9.8",
+    "concurrently": "^9.1.2",
     "vite": "^8.2.0",
     "vitest": "^5.0.1"
   }
diff --git a/requirements.txt b/requirements.txt
index 9d5fd11..a51a630 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,8 @@
 flask>=3.1.3
+
 flask-cors>=4.0.0
+
 google-genai>=2.24.0
+
 python-dotenv>=1.0.0
+
diff --git a/roleGuard.js b/roleGuard.js
index e086455..287bc00 100644
--- a/roleGuard.js
+++ b/roleGuard.js
@@ -111,17 +111,29 @@
    * payload signature containing the user's role claim on every backend API request.
    */
   async function validateRoleOnServer(action, token) {
-    if (!token) {
+    const authToken = token || (typeof window !== "undefined" && window.authGetToken ? window.authGetToken() : null);
+    if (!authToken) {
       return { success: false, error: "No token provided" };
     }
-    // Blueprint for server request:
-    // const response = await fetch('/api/verify-permission', {
-    //   method: 'POST',
-    //   headers: { 'Authorization': `Bearer ${token}`, 'Content-Type': 'application/json' },
-    //   body: JSON.stringify({ action })
-    // });
-    // return response.json();
-    return { success: true, mocked: true, action, role: getCurrentRole() };
+
+    const baseUrl = (typeof window !== "undefined" && window.AUTH_BASE_URL) || "";
+    try {
+      const response = await fetch(`${baseUrl}/api/verify-permission`, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${authToken}`,
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ action }),
+      });
+      const data = await response.json().catch(() => ({}));
+      if (!response.ok) {
+        return { success: false, error: data.error || `Server error: ${response.status}` };
+      }
+      return data;
+    } catch (error) {
+      return { success: false, error: error.message || "Verification request failed" };
+    }
   }
 
   const roleGuard = {
diff --git a/server/config.js b/server/config.js
new file mode 100644
index 0000000..e0bbd4b
--- /dev/null
+++ b/server/config.js
@@ -0,0 +1,30 @@
+const path = require("path");
+const dotenv = require("dotenv");
+
+dotenv.config({ path: path.join(__dirname, "..", ".env") });
+
+const JWT_SECRET = process.env.JWT_SECRET || "change-me-in-production";
+const JWT_EXPIRY_DAYS = parseInt(process.env.JWT_EXPIRY_DAYS || "7", 10);
+const RESET_TOKEN_HOURS = parseInt(process.env.RESET_TOKEN_HOURS || "1", 10);
+const VERIFY_TOKEN_HOURS = parseInt(process.env.VERIFY_TOKEN_HOURS || "24", 10);
+const AUTH_PORT = parseInt(process.env.AUTH_PORT || "5001", 10);
+const APP_BASE_URL = (process.env.APP_BASE_URL || "http://localhost:5173").replace(/\/$/, "");
+
+const defaultDbPath = path.join(__dirname, "..", "instance", "learnsphere.db");
+const DATABASE_PATH = process.env.DATABASE_PATH || defaultDbPath;
+
+module.exports = {
+  JWT_SECRET,
+  JWT_ALGORITHM: "HS256",
+  JWT_EXPIRY_DAYS,
+  RESET_TOKEN_HOURS,
+  VERIFY_TOKEN_HOURS,
+  AUTH_PORT,
+  APP_BASE_URL,
+  DATABASE_PATH,
+  SMTP_HOST: process.env.SMTP_HOST,
+  SMTP_PORT: parseInt(process.env.SMTP_PORT || "587", 10),
+  SMTP_USER: process.env.SMTP_USER,
+  SMTP_PASSWORD: process.env.SMTP_PASSWORD,
+  SMTP_FROM: process.env.SMTP_FROM || process.env.SMTP_USER || "noreply@learnsphere.local",
+};
diff --git a/server/db.js b/server/db.js
new file mode 100644
index 0000000..da781a5
--- /dev/null
+++ b/server/db.js
@@ -0,0 +1,63 @@
+const fs = require("fs");
+const path = require("path");
+const { DatabaseSync } = require("node:sqlite");
+const { DATABASE_PATH } = require("./config");
+
+const dir = path.dirname(DATABASE_PATH);
+if (!fs.existsSync(dir)) {
+  fs.mkdirSync(dir, { recursive: true });
+}
+
+const db = new DatabaseSync(DATABASE_PATH);
+
+db.exec(`
+  CREATE TABLE IF NOT EXISTS users (
+    id TEXT PRIMARY KEY,
+    email TEXT NOT NULL UNIQUE,
+    password_hash TEXT NOT NULL,
+    name TEXT NOT NULL,
+    role TEXT NOT NULL DEFAULT 'learner',
+    email_verified INTEGER NOT NULL DEFAULT 0,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS ix_users_email ON users (email);
+
+  CREATE TABLE IF NOT EXISTS password_reset_tokens (
+    id TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    token TEXT NOT NULL UNIQUE,
+    expires_at TEXT NOT NULL,
+    used INTEGER NOT NULL DEFAULT 0,
+    created_at TEXT NOT NULL,
+    FOREIGN KEY (user_id) REFERENCES users (id)
+  );
+
+  CREATE INDEX IF NOT EXISTS ix_password_reset_tokens_user_id ON password_reset_tokens (user_id);
+  CREATE INDEX IF NOT EXISTS ix_password_reset_tokens_token ON password_reset_tokens (token);
+
+  CREATE TABLE IF NOT EXISTS email_verification_tokens (
+    id TEXT PRIMARY KEY,
+    user_id TEXT NOT NULL,
+    token TEXT NOT NULL UNIQUE,
+    expires_at TEXT NOT NULL,
+    used INTEGER NOT NULL DEFAULT 0,
+    created_at TEXT NOT NULL,
+    FOREIGN KEY (user_id) REFERENCES users (id)
+  );
+
+  CREATE INDEX IF NOT EXISTS ix_email_verification_tokens_user_id ON email_verification_tokens (user_id);
+  CREATE INDEX IF NOT EXISTS ix_email_verification_tokens_token ON email_verification_tokens (token);
+
+  CREATE TABLE IF NOT EXISTS revoked_tokens (
+    id TEXT PRIMARY KEY,
+    jti TEXT NOT NULL UNIQUE,
+    expires_at TEXT NOT NULL,
+    revoked_at TEXT NOT NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS ix_revoked_tokens_jti ON revoked_tokens (jti);
+`);
+
+module.exports = db;
diff --git a/server/index.js b/server/index.js
new file mode 100644
index 0000000..03ed5cb
--- /dev/null
+++ b/server/index.js
@@ -0,0 +1,23 @@
+const express = require("express");
+const cors = require("cors");
+const { AUTH_PORT } = require("./config");
+const authRoutes = require("./routes/auth");
+const apiRoutes = require("./routes/api");
+
+require("./db");
+
+const app = express();
+
+app.use(cors());
+app.use(express.json());
+
+app.get("/health", (_req, res) => {
+  res.json({ status: "ok", service: "learnsphere-auth" });
+});
+
+app.use("/api/auth", authRoutes);
+app.use("/api", apiRoutes);
+
+app.listen(AUTH_PORT, "0.0.0.0", () => {
+  console.log(`LearnSphere auth server running on http://127.0.0.1:${AUTH_PORT}`);
+});
diff --git a/server/middleware/auth.js b/server/middleware/auth.js
new file mode 100644
index 0000000..6a1dd00
--- /dev/null
+++ b/server/middleware/auth.js
@@ -0,0 +1,14 @@
+const { getCurrentUserPayload } = require("../utils/jwt");
+
+function tokenRequired(req, res, next) {
+  const payload = getCurrentUserPayload(req);
+  if (!payload) {
+    return res.status(401).json({ error: "Invalid or expired token" });
+  }
+  req.auth = payload;
+  next();
+}
+
+module.exports = {
+  tokenRequired,
+};
diff --git a/server/routes/api.js b/server/routes/api.js
new file mode 100644
index 0000000..5a9269d
--- /dev/null
+++ b/server/routes/api.js
@@ -0,0 +1,37 @@
+const express = require("express");
+const { getCurrentUserPayload } = require("../utils/jwt");
+
+const router = express.Router();
+
+const ACTION_RULES = {
+  create_class: ["teacher"],
+  build_assignment: ["teacher"],
+  export_progress: ["learner", "parent", "teacher"],
+  submit_quiz: ["learner"],
+  clear_progress: ["learner"],
+  manage_sync: ["learner"],
+};
+
+router.post("/verify-permission", (req, res) => {
+  const action = (req.body || {}).action;
+  const payload = getCurrentUserPayload(req);
+
+  if (!payload) {
+    return res.status(401).json({ success: false, error: "Invalid or expired token" });
+  }
+
+  const role = payload.role || "learner";
+  const allowedRoles = ACTION_RULES[action];
+
+  if (allowedRoles === undefined) {
+    return res.json({ success: true, role, action });
+  }
+
+  if (!allowedRoles.includes(role)) {
+    return res.status(403).json({ success: false, error: "Unauthorized", role });
+  }
+
+  return res.json({ success: true, role, action });
+});
+
+module.exports = router;
diff --git a/server/routes/auth.js b/server/routes/auth.js
new file mode 100644
index 0000000..b8042f1
--- /dev/null
+++ b/server/routes/auth.js
@@ -0,0 +1,267 @@
+const crypto = require("crypto");
+const express = require("express");
+const db = require("../db");
+const { JWT_EXPIRY_DAYS, RESET_TOKEN_HOURS, VERIFY_TOKEN_HOURS } = require("../config");
+const { tokenRequired } = require("../middleware/auth");
+const { buildAppUrl, sendEmail } = require("../utils/email");
+const {
+  createAccessToken,
+  decodeAccessToken,
+  generateToken,
+  getBearerToken,
+  revokeToken,
+  userToDict,
+} = require("../utils/jwt");
+const { hashPassword, isValidEmail, verifyPassword } = require("../utils/password");
+
+const router = express.Router();
+
+function utcNowIso() {
+  return new Date().toISOString();
+}
+
+function addHours(hours) {
+  return new Date(Date.now() + hours * 60 * 60 * 1000).toISOString();
+}
+
+function getUserByEmail(email) {
+  return db.prepare("SELECT * FROM users WHERE email = ?").get(email);
+}
+
+function getUserById(id) {
+  return db.prepare("SELECT * FROM users WHERE id = ?").get(id);
+}
+
+router.post("/register", async (req, res) => {
+  const data = req.body || {};
+  const name = String(data.name || data.fullname || "").trim();
+  const email = String(data.email || "").trim().toLowerCase();
+  const password = data.password || "";
+
+  if (!name || !email || !password) {
+    return res.status(400).json({ error: "Name, email, and password are required" });
+  }
+
+  if (!isValidEmail(email)) {
+    return res.status(400).json({ error: "Invalid email address" });
+  }
+
+  if (password.length < 6) {
+    return res.status(400).json({ error: "Password must be at least 6 characters" });
+  }
+
+  if (getUserByEmail(email)) {
+    return res.status(409).json({ error: "An account with this email already exists" });
+  }
+
+  const now = utcNowIso();
+  const userId = crypto.randomUUID();
+  const passwordHash = await hashPassword(password);
+
+  db.prepare(
+    `INSERT INTO users (id, email, password_hash, name, role, email_verified, created_at, updated_at)
+     VALUES (?, ?, ?, ?, 'learner', 0, ?, ?)`
+  ).run(userId, email, passwordHash, name, now, now);
+
+  const user = getUserById(userId);
+  const verificationToken = generateToken();
+
+  db.prepare(
+    `INSERT INTO email_verification_tokens (id, user_id, token, expires_at, used, created_at)
+     VALUES (?, ?, ?, ?, 0, ?)`
+  ).run(crypto.randomUUID(), userId, verificationToken, addHours(VERIFY_TOKEN_HOURS), now);
+
+  const verifyUrl = buildAppUrl(`/log/verify-email.html?token=${verificationToken}`);
+  const mail = await sendEmail(
+    email,
+    "Verify your LearnSphere account",
+    `Welcome to LearnSphere!\n\nClick the link below to verify your email:\n${verifyUrl}\n\n` +
+      `This link expires in ${VERIFY_TOKEN_HOURS} hours.`
+  );
+
+  if (!mail.sent) {
+    return res.status(201).json({
+      message: "Account created, but the verification email could not be sent.",
+      user: userToDict(user),
+      email_verification_sent: false,
+      error:
+        mail.reason === "not_configured"
+          ? "Account created, but mail is not configured on the server."
+          : "Account created, but the verification email could not be sent.",
+    });
+  }
+
+  return res.status(201).json({
+    message: "Account created. Check your email to verify your account.",
+    user: userToDict(user),
+    email_verification_sent: true,
+  });
+});
+
+router.post("/login", async (req, res) => {
+  const data = req.body || {};
+  const email = String(data.email || "").trim().toLowerCase();
+  const password = data.password || "";
+
+  if (!email || !password) {
+    return res.status(400).json({ error: "Email and password are required" });
+  }
+
+  const user = getUserByEmail(email);
+  if (!user || !(await verifyPassword(password, user.password_hash))) {
+    return res.status(401).json({ error: "Invalid email or password" });
+  }
+
+  const { token, expiresAt } = createAccessToken(user);
+
+  return res.json({
+    token,
+    expires_in: JWT_EXPIRY_DAYS * 24 * 60 * 60,
+    expires_at: expiresAt.toISOString(),
+    user: userToDict(user),
+  });
+});
+
+router.post("/logout", tokenRequired, (req, res) => {
+  const token = getBearerToken(req);
+  if (token) {
+    const decoded = decodeAccessToken(token);
+    if (decoded && decoded.jti) {
+      const expiresAt = decoded.exp
+        ? new Date(decoded.exp * 1000)
+        : new Date(Date.now() + JWT_EXPIRY_DAYS * 24 * 60 * 60 * 1000);
+      revokeToken(decoded.jti, expiresAt);
+    }
+  }
+
+  return res.json({ message: "Logged out successfully" });
+});
+
+router.get("/me", tokenRequired, (req, res) => {
+  const user = getUserById(req.auth.sub);
+  if (!user) {
+    return res.status(404).json({ error: "User not found" });
+  }
+  return res.json({ user: userToDict(user) });
+});
+
+router.post("/forgot-password", async (req, res) => {
+  const data = req.body || {};
+  const email = String(data.email || "").trim().toLowerCase();
+
+  if (!email || !isValidEmail(email)) {
+    return res.status(400).json({ error: "Valid email is required" });
+  }
+
+  const user = getUserByEmail(email);
+  if (!user) {
+    return res.status(404).json({ error: "No account found for that email." });
+  }
+
+  const resetToken = generateToken();
+  const now = utcNowIso();
+
+  db.prepare(
+    `INSERT INTO password_reset_tokens (id, user_id, token, expires_at, used, created_at)
+     VALUES (?, ?, ?, ?, 0, ?)`
+  ).run(crypto.randomUUID(), user.id, resetToken, addHours(RESET_TOKEN_HOURS), now);
+
+  const resetUrl = buildAppUrl(`/log/reset-password.html?token=${resetToken}`);
+  const mail = await sendEmail(
+    email,
+    "Reset your LearnSphere password",
+    `You requested a password reset.\n\nClick the link below to set a new password:\n${resetUrl}\n\n` +
+      `This link expires in ${RESET_TOKEN_HOURS} hour(s).\n\n` +
+      "If you did not request this, you can ignore this email."
+  );
+
+  if (!mail.sent) {
+    return res.status(503).json({
+      error:
+        mail.reason === "not_configured"
+          ? "Could not send the reset email. Mail is not configured on the server."
+          : "Could not send the reset email. The mail server rejected the login.",
+    });
+  }
+
+  return res.json({
+    message: "A password reset link has been sent to your email.",
+  });
+});
+
+router.post("/reset-password", async (req, res) => {
+  const data = req.body || {};
+  const token = String(data.token || "").trim();
+  const password = data.password || "";
+
+  if (!token || !password) {
+    return res.status(400).json({ error: "Token and new password are required" });
+  }
+
+  if (password.length < 6) {
+    return res.status(400).json({ error: "Password must be at least 6 characters" });
+  }
+
+  const resetRecord = db
+    .prepare("SELECT * FROM password_reset_tokens WHERE token = ? AND used = 0")
+    .get(token);
+
+  if (!resetRecord || resetRecord.expires_at < utcNowIso()) {
+    return res.status(400).json({ error: "Invalid or expired reset token" });
+  }
+
+  const user = getUserById(resetRecord.user_id);
+  if (!user) {
+    return res.status(404).json({ error: "User not found" });
+  }
+
+  const passwordHash = await hashPassword(password);
+  db.prepare("UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?").run(
+    passwordHash,
+    utcNowIso(),
+    user.id
+  );
+  db.prepare("UPDATE password_reset_tokens SET used = 1 WHERE id = ?").run(resetRecord.id);
+
+  return res.json({ message: "Password reset successfully. You can now log in." });
+});
+
+router.get("/verify-email", (req, res) => {
+  const token = String(req.query.token || "").trim();
+  return handleVerifyEmail(token, res);
+});
+
+router.post("/verify-email", (req, res) => {
+  const token = String((req.body || {}).token || "").trim();
+  return handleVerifyEmail(token, res);
+});
+
+function handleVerifyEmail(token, res) {
+  if (!token) {
+    return res.status(400).json({ error: "Verification token is required" });
+  }
+
+  const record = db
+    .prepare("SELECT * FROM email_verification_tokens WHERE token = ? AND used = 0")
+    .get(token);
+
+  if (!record || record.expires_at < utcNowIso()) {
+    return res.status(400).json({ error: "Invalid or expired verification token" });
+  }
+
+  const user = getUserById(record.user_id);
+  if (!user) {
+    return res.status(404).json({ error: "User not found" });
+  }
+
+  db.prepare("UPDATE users SET email_verified = 1, updated_at = ? WHERE id = ?").run(
+    utcNowIso(),
+    user.id
+  );
+  db.prepare("UPDATE email_verification_tokens SET used = 1 WHERE id = ?").run(record.id);
+
+  const updatedUser = getUserById(user.id);
+  return res.json({ message: "Email verified successfully", user: userToDict(updatedUser) });
+}
+
+module.exports = router;
diff --git a/server/utils/email.js b/server/utils/email.js
new file mode 100644
index 0000000..64746a4
--- /dev/null
+++ b/server/utils/email.js
@@ -0,0 +1,51 @@
+const nodemailer = require("nodemailer");
+const {
+  SMTP_HOST,
+  SMTP_PORT,
+  SMTP_USER,
+  SMTP_PASSWORD,
+  SMTP_FROM,
+  APP_BASE_URL,
+} = require("../config");
+
+function buildAppUrl(path) {
+  return `${APP_BASE_URL}${path}`;
+}
+
+async function sendEmail(toEmail, subject, body) {
+  if (!SMTP_HOST || !SMTP_USER || !SMTP_PASSWORD) {
+    console.log(`[AUTH] Email not sent (SMTP not configured). To: ${toEmail}`);
+    console.log(`[AUTH] Subject: ${subject}`);
+    console.log(`[AUTH] Body:\n${body}`);
+    return { sent: false, reason: "not_configured" };
+  }
+
+  try {
+    const transporter = nodemailer.createTransport({
+      host: SMTP_HOST,
+      port: SMTP_PORT,
+      secure: SMTP_PORT === 465,
+      auth: {
+        user: SMTP_USER,
+        pass: SMTP_PASSWORD,
+      },
+    });
+
+    await transporter.sendMail({
+      from: SMTP_FROM,
+      to: toEmail,
+      subject,
+      text: body,
+    });
+
+    return { sent: true };
+  } catch (error) {
+    console.error(`[AUTH] Email failed for ${toEmail}:`, error.message);
+    return { sent: false, reason: "failed" };
+  }
+}
+
+module.exports = {
+  buildAppUrl,
+  sendEmail,
+};
diff --git a/server/utils/jwt.js b/server/utils/jwt.js
new file mode 100644
index 0000000..24c265e
--- /dev/null
+++ b/server/utils/jwt.js
@@ -0,0 +1,92 @@
+const crypto = require("crypto");
+const jwt = require("jsonwebtoken");
+const db = require("../db");
+const {
+  JWT_SECRET,
+  JWT_ALGORITHM,
+  JWT_EXPIRY_DAYS,
+} = require("../config");
+
+function generateToken() {
+  return crypto.randomBytes(32).toString("base64url");
+}
+
+function userToDict(user) {
+  return {
+    id: user.id,
+    email: user.email,
+    fullname: user.name,
+    name: user.name,
+    role: user.role,
+    email_verified: Boolean(user.email_verified),
+  };
+}
+
+function createAccessToken(user) {
+  const now = Math.floor(Date.now() / 1000);
+  const expiresAt = new Date(Date.now() + JWT_EXPIRY_DAYS * 24 * 60 * 60 * 1000);
+  const payload = {
+    sub: user.id,
+    email: user.email,
+    role: user.role,
+    name: user.name,
+    iat: now,
+    exp: Math.floor(expiresAt.getTime() / 1000),
+    jti: crypto.randomUUID(),
+  };
+
+  const token = jwt.sign(payload, JWT_SECRET, { algorithm: JWT_ALGORITHM });
+  return { token, expiresAt };
+}
+
+function decodeAccessToken(token) {
+  try {
+    return jwt.verify(token, JWT_SECRET, { algorithms: [JWT_ALGORITHM] });
+  } catch {
+    return null;
+  }
+}
+
+function isTokenRevoked(jti) {
+  if (!jti) return false;
+  const row = db.prepare("SELECT id FROM revoked_tokens WHERE jti = ?").get(jti);
+  return Boolean(row);
+}
+
+function revokeToken(jti, expiresAt) {
+  if (!jti || isTokenRevoked(jti)) return;
+
+  db.prepare(
+    "INSERT INTO revoked_tokens (id, jti, expires_at, revoked_at) VALUES (?, ?, ?, ?)"
+  ).run(crypto.randomUUID(), jti, expiresAt.toISOString(), new Date().toISOString());
+}
+
+function getBearerToken(req) {
+  const authHeader = req.headers.authorization || "";
+  if (authHeader.startsWith("Bearer ")) {
+    return authHeader.slice(7).trim();
+  }
+  return null;
+}
+
+function getCurrentUserPayload(req) {
+  const token = getBearerToken(req);
+  if (!token) return null;
+
+  const payload = decodeAccessToken(token);
+  if (!payload) return null;
+  if (isTokenRevoked(payload.jti)) return null;
+
+  return payload;
+}
+
+module.exports = {
+  generateToken,
+  userToDict,
+  createAccessToken,
+  decodeAccessToken,
+  isTokenRevoked,
+  revokeToken,
+  getBearerToken,
+  getCurrentUserPayload,
+};
diff --git a/server/utils/password.js b/server/utils/password.js
new file mode 100644
index 0000000..c15fdc9
--- /dev/null
+++ b/server/utils/password.js
@@ -0,0 +1,25 @@
+const bcrypt = require("bcryptjs");
+
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+
+function isValidEmail(email) {
+  return Boolean(email && EMAIL_REGEX.test(String(email).trim()));
+}
+
+async function hashPassword(password) {
+  return bcrypt.hash(password, 10);
+}
+
+async function verifyPassword(password, passwordHash) {
+  try {
+    return bcrypt.compare(password, passwordHash);
+  } catch {
+    return false;
+  }
+}
+
+module.exports = {
+  isValidEmail,
+  hashPassword,
+  verifyPassword,
+};
diff --git a/src/landing.js b/src/landing.js
new file mode 100644
index 0000000..4d9ed56
--- /dev/null
+++ b/src/landing.js
@@ -0,0 +1,6 @@
+// Landing page entry (index.html only) — keep bundle small; avoid progress/quiz modules here.
+import '../variables.css';
+import '../styles.css';
+import '../navbar.js';
+import '../script.js';
+import '../accessibility.js';
diff --git a/src/main.js b/src/main.js
index 64c1d42..5f4f1b3 100644
--- a/src/main.js
+++ b/src/main.js
@@ -1,7 +1,7 @@
-// src/main.js – Vite entry point
-// Import shared scripts and modules
-import '../quizUtils.js';
-import '../navbar.js';
+// src/main.js – Vite entry point (non-landing pages that import index module)
+import '../variables.css';
+import '../styles.css';
+import '../quizUtils.js';import '../navbar.js';
 import '../script.js';
 import '../accessibility.js';
 import '../progress.js';
diff --git a/sw-register.js b/sw-register.js
new file mode 100644
index 0000000..9e1f2f9
--- /dev/null
+++ b/sw-register.js
@@ -0,0 +1,38 @@
+/**
+ * Register the PWA service worker in production only.
+ * On Vite dev (5173 / 4173), unregister any existing SW so stale CSS/JS caches
+ * do not break local development.
+ */
+(function () {
+  if (!("serviceWorker" in navigator)) return;
+
+  const host = window.location.hostname;
+  const port = window.location.port;
+  const isViteDev =
+    (host === "localhost" || host === "127.0.0.1") &&
+    (port === "5173" || port === "4173");
+
+  if (isViteDev) {
+    navigator.serviceWorker.getRegistrations().then(function (regs) {
+      regs.forEach(function (reg) {
+        reg.unregister().catch(function () {});
+      });
+    });
+    if (window.caches && caches.keys) {
+      caches.keys().then(function (keys) {
+        keys.forEach(function (key) {
+          if (key.startsWith("learnsphere-")) {
+            caches.delete(key).catch(function () {});
+          }
+        });
+      });
+    }
+    return;
+  }
+
+  window.addEventListener("load", function () {
+    navigator.serviceWorker.register("/sw.js").catch(function (err) {
+      console.warn("LearnSphere: Service Worker registration failed:", err);
+    });
+  });
+})();
diff --git a/sw.js b/sw.js
index f6c1d0c..0482955 100644
--- a/sw.js
+++ b/sw.js
@@ -9,7 +9,7 @@
 // Important: Service workers cannot synchronously read manifest.json.
 // Keep a deterministic, deploy-time value so old caches are invalidated.
 // Update this when releasing a new build.
-const CACHE_VERSION = "v5";
+const CACHE_VERSION = "v6";
 const CACHE_NAME = `learnsphere-static-${CACHE_VERSION}`;
 
 // Subject pack caching version. Bump to invalidate old offline packs.
@@ -141,6 +141,16 @@ async function cacheUrlsIndividually(cache, urls) {
 }
 
 self.addEventListener("install", (event) => {
+  const url = self.location;
+  const isViteDev =
+    (url.hostname === "localhost" || url.hostname === "127.0.0.1") &&
+    (url.port === "5173" || url.port === "4173");
+
+  if (isViteDev) {
+    self.skipWaiting();
+    return;
+  }
+
   event.waitUntil(
     (async () => {
       const cache = await caches.open(CACHE_NAME);
@@ -184,9 +194,19 @@ self.addEventListener("activate", (event) => {
 
 
 self.addEventListener("fetch", (event) => {
-  const req = event.request;
   const url = requestUrl(event);
 
+  // Never intercept Vite dev server requests (avoids stale cache-first CSS/JS).
+  if (
+    url &&
+    (url.hostname === "localhost" || url.hostname === "127.0.0.1") &&
+    (url.port === "5173" || url.port === "4173")
+  ) {
+    return;
+  }
+
+  const req = event.request;
+
   // Only handle GET requests
   if (req.method !== "GET") return;
 
diff --git a/vite.config.js b/vite.config.mjs
similarity index 54%
rename from vite.config.js
rename to vite.config.mjs
index ed1b055..1043969 100644
--- a/vite.config.js
+++ b/vite.config.mjs
@@ -1,4 +1,4 @@
-// vite.config.js – Vite configuration for LearnSphere_2
+// vite.config.mjs – Vite configuration for LearnSphere_2
 import { defineConfig } from 'vite';
 import { fileURLToPath } from 'url';
 import { readdirSync, statSync } from 'fs';
@@ -6,12 +6,6 @@ import { join, relative, dirname } from 'path';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
-// LearnSphere is a multi-page static site: every top-level and nested
-// .html file needs to be its own Rollup entry point, or Vite only
-// bundles index.html and every other page (Resources, Courses, all
-// quiz pages, etc.) is silently missing from dist/ and 404s in prod.
-// This walks the repo once at build time and builds that entry map
-// automatically, so newly added .html files don't need manual wiring.
 function findHtmlEntries(dir, entries = {}) {
   const skip = new Set(['node_modules', 'dist', '.git', '.github']);
 
@@ -24,7 +18,6 @@ function findHtmlEntries(dir, entries = {}) {
     if (stats.isDirectory()) {
       findHtmlEntries(fullPath, entries);
     } else if (name.endsWith('.html')) {
-      // Key = path relative to root, without extension, slashes -> dashes
       const relPath = relative(__dirname, fullPath).replace(/\.html$/, '');
       const key = relPath.split(/[\\/]/).join('-') || 'index';
       entries[key] = fullPath;
@@ -35,8 +28,8 @@ function findHtmlEntries(dir, entries = {}) {
 }
 
 export default defineConfig({
-  root: '.', // project root
-  publicDir: 'public', // static assets folder (if any)
+  root: '.',
+  publicDir: 'public',
   build: {
     outDir: 'dist',
     rollupOptions: {
@@ -44,12 +37,26 @@ export default defineConfig({
     },
   },
   server: {
-    open: true,
+    port: 5173,
+    strictPort: true,
+    host: 'localhost',
+    open: '/index.html',
+    hmr: {
+      host: 'localhost',
+      port: 5173,
+      clientPort: 5173,
+    },
     proxy: {
-      // Forward AI Tutor calls to the Flask backend during development,
-      // so a CHATBOT_BASE_URL of "" (same-origin) also works with `npm run dev`.
-      '/chat': 'http://127.0.0.1:5000',
+      '/chat': {
+        target: 'http://127.0.0.1:5000',
+        bypass(req) {
+          const path = (req.url || '').split('?')[0];
+          if (path !== '/chat') return path;
+        },
+      },
       '/explain_mistake': 'http://127.0.0.1:5000',
+      '/api/auth': 'http://127.0.0.1:5001',
+      '/api/verify-permission': 'http://127.0.0.1:5001',
     },
   },
-});
\ No newline at end of file
+});