added required code changes, components, and packages for login feature

backend/setup.js

@@ -2,6 +2,7 @@
 // This creates a fresh database with multi-vendor support built-in
 
 const sqlite3 = require('sqlite3').verbose();
+const bcrypt = require('bcryptjs');
 const fs = require('fs');
 const path = require('path');
 
@@ -59,6 +60,34 @@ function initializeDatabase() {
             CREATE INDEX IF NOT EXISTS idx_doc_vendor ON documents(vendor);
             CREATE INDEX IF NOT EXISTS idx_doc_type ON documents(type);
 
+            -- Users table for authentication
+            CREATE TABLE IF NOT EXISTS users (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                username VARCHAR(50) UNIQUE NOT NULL,
+                email VARCHAR(255) UNIQUE NOT NULL,
+                password_hash VARCHAR(255) NOT NULL,
+                role VARCHAR(20) NOT NULL DEFAULT 'viewer',
+                is_active BOOLEAN DEFAULT 1,
+                created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+                last_login TIMESTAMP,
+                CHECK (role IN ('admin', 'editor', 'viewer'))
+            );
+
+            -- Sessions table for session management
+            CREATE TABLE IF NOT EXISTS sessions (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                session_id VARCHAR(255) UNIQUE NOT NULL,
+                user_id INTEGER NOT NULL,
+                expires_at TIMESTAMP NOT NULL,
+                created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+                FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+            );
+
+            CREATE INDEX IF NOT EXISTS idx_sessions_session_id ON sessions(session_id);
+            CREATE INDEX IF NOT EXISTS idx_sessions_user_id ON sessions(user_id);
+            CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
+            CREATE INDEX IF NOT EXISTS idx_users_username ON users(username);
+
             INSERT OR IGNORE INTO required_documents (vendor, document_type, is_mandatory, description) VALUES
             ('Microsoft', 'advisory', 1, 'Official Microsoft Security Advisory'),
             ('Microsoft', 'screenshot', 0, 'Proof of patch application'),
@@ -109,6 +138,42 @@ function createUploadsDirectory() {
     }
 }
 
+// Create default admin user
+async function createDefaultAdmin(db) {
+    return new Promise((resolve, reject) => {
+        // Check if admin already exists
+        db.get('SELECT id FROM users WHERE username = ?', ['admin'], async (err, row) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+
+            if (row) {
+                console.log('✓ Default admin user already exists');
+                resolve();
+                return;
+            }
+
+            // Create admin user with password 'admin123'
+            const passwordHash = await bcrypt.hash('admin123', 10);
+
+            db.run(
+                `INSERT INTO users (username, email, password_hash, role, is_active)
+                 VALUES (?, ?, ?, ?, ?)`,
+                ['admin', 'admin@localhost', passwordHash, 'admin', 1],
+                (err) => {
+                    if (err) {
+                        reject(err);
+                    } else {
+                        console.log('✓ Created default admin user (admin/admin123)');
+                        resolve();
+                    }
+                }
+            );
+        });
+    });
+}
+
 // Add sample CVE data (optional - for testing)
 async function addSampleData(db) {
     console.log('\n📝 Adding sample CVE data for testing...');
@@ -179,12 +244,14 @@ function displaySummary() {
     console.log('╚════════════════════════════════════════════════════════╝');
     console.log('\n📊 What was created:');
     console.log('   ✓ SQLite database (cve_database.db)');
-    console.log('   ✓ Tables: cves, documents, required_documents');
+    console.log('   ✓ Tables: cves, documents, required_documents, users, sessions');
     console.log('   ✓ Multi-vendor support with UNIQUE(cve_id, vendor)');
     console.log('   ✓ Vendor column in documents table');
+    console.log('   ✓ User authentication with session-based auth');
     console.log('   ✓ Indexes for fast queries');
     console.log('   ✓ Document compliance view');
     console.log('   ✓ Uploads directory for file storage');
+    console.log('   ✓ Default admin user (admin/admin123)');
     console.log('\n📁 File structure will be:');
     console.log('   uploads/');
     console.log('     └── CVE-XXXX-XXXX/');
@@ -219,7 +286,10 @@ async function main() {
         
         // Initialize database
         const db = await initializeDatabase();
-        
+
+        // Create default admin user
+        await createDefaultAdmin(db);
+
         // Add sample data
         await addSampleData(db);