redo of entire app

app/api/auth/[nextuath].js

@@ -0,0 +1,38 @@
+import NextAuth from 'next-auth';
+import Providers from 'next-auth/providers';
+import bcrypt from 'bcryptjs';
+import { query } from '../../../lib/db';
+
+export default NextAuth({
+    providers: [
+        Providers.Credentials({
+            name: 'Credentials',
+            credentials: {
+                username: { label: 'Username', type: 'text' },
+                password: { label: 'Password', type: 'password' },
+            },
+            authorize: async (credentials) => {
+                const user = await query('SELECT * FROM users WHERE username = ?', [credentials.username]);
+                if (user && bcrypt.compareSync(credentials.password, user.password)) {
+                    return { id: user.id, name: user.username, role: user.role };
+                }
+                return null;
+            },
+        }),
+    ],
+    callbacks: {
+        jwt: async (token, user) => {
+            if (user) {
+                token.role = user.role;
+            }
+            return token;
+        },
+        session: async (session, token) => {
+            session.user.role = token.role;
+            return session;
+        },
+    },
+    pages: {
+        signIn: '/login', // Redirect to the login page
+    },
+});

app/api/mark-clue/route.js

@@ -0,0 +1,12 @@
+import { query } from '../../../lib/db';
+
+export async function POST(request) {
+    const { clueId, teamId } = await request.json();
+
+    await query('UPDATE clues SET found = TRUE WHERE id = ? AND team_id = ?', [
+        clueId,
+        teamId,
+    ]);
+
+    return Response.json({ message: 'Clue marked as found' });
+}