diff --git a/README.md b/README.md
index 1e4a84a..ebcf613 100644
--- a/README.md
+++ b/README.md
@@ -1 +1,3 @@
-Change example.env to .env
\ No newline at end of file
+Change example.env to .env
+
+>> Join Postman Workspace by following [link](https://app.getpostman.com/join-team?invite_code=2d2ef31819c048b241f82bd7f85ac6dd332460290748fd1f36bee2aedb38200e&target_code=ca1aae0c6efdc09edabb6d99534b9323)
\ No newline at end of file
diff --git a/backend/controllers/auth.controller.js b/backend/controllers/auth.controller.js
index e69de29..374dc80 100644
--- a/backend/controllers/auth.controller.js
+++ b/backend/controllers/auth.controller.js
@@ -0,0 +1,92 @@
+import { User } from "../models/user.model.js";
+import bcryptjs from 'bcryptjs';
+
+import {generateTokenAndSetCookie} from "../utils/generateTokenAndSetCookie.js"
+import { sendVerificationEmail, sendWelcomeEmail } from "../mailtrap/emails.js";
+
+export const signup = async (req, res) => {
+ const { email, password, name } = req.body;
+
+ try {
+ if (!email || !password || !name) {
+ throw new Error("All fields are required");
+ }
+
+ const userAlreadyExists = await User.findOne({ email });
+ console.log("userAlreadyExists", userAlreadyExists);
+
+ if (userAlreadyExists) {
+ return res.status(400).json({ success: false, message: "User already exists" });
+ }
+
+ const hashedPassword = await bcryptjs.hash(password, 10);
+ const verificationToken = Math.floor(100000 + Math.random() * 900000).toString();
+
+ const user = new User({
+ email,
+ password: hashedPassword,
+ name,
+ verificationToken,
+ verificationTokenExpiresAt: Date.now() + 24 * 60 * 60 * 1000, // 24 hours
+ });
+
+ await user.save();
+
+ // jwt
+ generateTokenAndSetCookie(res, user._id);
+ await sendVerificationEmail(user.email, verificationToken);
+
+
+ res.status(201).json({
+ success: true,
+ message: "User created successfully",
+ user: {
+ ...user._doc,
+ password: undefined,
+ },
+ });
+ } catch (error) {
+ res.status(400).json({ success: false, message: error.message });
+ }
+};
+
+export const verifyEmail = async (req, res) => {
+ const { code } = req.body;
+ try {
+ const user = await User.findOne({
+ verificationToken: code,
+ verificationTokenExpiresAt: { $gt: Date.now() },
+ });
+
+ if (!user) {
+ return res.status(400).json({ success: false, message: "Invalid or expired verification code" });
+ }
+
+ user.isVerified = true;
+ user.verificationToken = undefined;
+ user.verificationTokenExpiresAt = undefined;
+ await user.save();
+
+ await sendWelcomeEmail(user.email, user.name);
+
+ res.status(200).json({
+ success: true,
+ message: "Email verified successfully",
+ user: {
+ ...user._doc,
+ password: undefined,
+ },
+ });
+ } catch (error) {
+ console.log("error in verifyEmail ", error);
+ res.status(500).json({ success: false, message: "Server error" });
+ }
+};
+
+
+export const login = async (req, res) => {
+ res.send("login route");
+};
+export const logout = async (req, res) => {
+ res.send("logout route")
+};
\ No newline at end of file
diff --git a/backend/mailtrap/emailTemplates.js b/backend/mailtrap/emailTemplates.js
new file mode 100644
index 0000000..4282bbd
--- /dev/null
+++ b/backend/mailtrap/emailTemplates.js
@@ -0,0 +1,95 @@
+export const VERIFICATION_EMAIL_TEMPLATE = `
+
+
+
+
+
+ Verify Your Email
+
+
+
+
Verify Your Email
+
+
+
Hello,
+
Thank you for signing up! Your verification code is:
+
+ {verificationCode}
+
+
Enter this code on the verification page to complete your registration.
+
This code will expire in 15 minutes for security reasons.
+
If you didn't create an account with us, please ignore this email.
+
Best regards,
Your App Team
+
+
This is an automated message, please do not reply to this email.
+
+
Password Reset Successful
+
+
+
Hello,
+
We're writing to confirm that your password has been successfully reset.
+
+
If you did not initiate this password reset, please contact our support team immediately.
+
For security reasons, we recommend that you:
+
+ - Use a strong, unique password
+ - Enable two-factor authentication if available
+ - Avoid using the same password across multiple sites
+
+
Thank you for helping us keep your account secure.
+
Best regards,
Your App Team
+
+
This is an automated message, please do not reply to this email.
+
+
Password Reset
+
+
+
Hello,
+
We received a request to reset your password. If you didn't make this request, please ignore this email.
+
To reset your password, click the button below:
+
+
This link will expire in 1 hour for security reasons.
+
Best regards,
Your App Team
+
+
This is an automated message, please do not reply to this email.
+