Better Auth — or just use forge/auth

const { WebApp }         = require(class="tk-str">'@hyperbridge/forge/server');
const { Password, JWT }  = require(class="tk-str">'@hyperbridge/forge/auth');

const app   = new WebApp();
const users = new Map();

app.post(class="tk-str">'/signup', async (c) => {
  const { email, password } = await c.req.json();
  users.set(email, { hash: await Password.hash(password) });
  return c.json({
    token: JWT.sign({ email }, process.env.JWT_SECRET),
  });
});

app.post(class="tk-str">'/login', async (c) => {
  const { email, password } = await c.req.json();
  const u = users.get(email);
  if (!u || !(await Password.verify(password, u.hash))) {
    return c.json({ error: class="tk-str">'invalid' }, 401);
  }
  return c.json({
    token: JWT.sign({ email }, process.env.JWT_SECRET),
  });
});

app.listen(3000);