Security Hardening

JWT Authentication

Token Creation

import jwt from 'jsonwebtoken';

const createToken = (user) => jwt.sign(
  { userId: user._id, email: user.email, plan: user.plan },
  process.env.JWT_SECRET,
  { expiresIn: '7d' }
);