Adding login endpoint

.github/workflows/mapi.yml

@@ -64,7 +64,7 @@ jobs:
         flags: vulnerability-tests
         fail_ci_if_error: true
 
-    - name: Archive Mayhem for API report
+    - name: Archive Mayhem for API report 
       uses: actions/upload-artifact@v3
       with:
         name: mapi-report

app.js

@@ -22,6 +22,23 @@ db.run('CREATE TABLE users (email TEXT, password TEXT)', (err) => {
 app.get('/', (req, res) => {
   res.send('Hello, World!');
 });
+
+// Login endpoint (Unsafe)
+app.get('/login', (req, res) => {
+  const { email, password } = req.query;
+
+  if (!email || !password) {
+    return res.status(400).send('Email and password are required');
+  }
+  const query = `SELECT * FROM users WHERE email = '${email}' and password = '${password}'`;
+
+  db.get(query, [], (err, row) => {
+    if (err) {
+      return res.status(500).send(`{"error": "${err.stack}"}`);
+    }
+    return res.send('Login successful');
+  });
+}); 
 
 const server = app.listen(port, () => {
   console.log(`Listening at http://localhost:${port}`);

openapi.yaml

@@ -21,4 +21,36 @@ paths:
                 type: string
                 example: Hello, World!
 
-
+  /login:
+    get:
+      summary: User login
+      description: "Allows user to log in (Note: this is an unsafe method and not recommended for production use)."
+      parameters:
+        - in: query
+          name: email
+          required: true
+          description: User's email
+          schema:
+            type: string
+            format: email
+        - in: query
+          name: password
+          required: true
+          description: User's password
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Login successful
+          content:
+            text/html:
+              schema:
+                type: string
+                example: "<p>Login successful</p>"
+        '400':
+          description: Bad request, parameters missing or invalid
+          content:
+            text/html:
+              schema:
+                type: string
+                example: "<p>Bad request</p>"