forge/auth on Cloudflare Workers

import { WebApp }        from class="tk-str">'@hyperbridge/forge/server';
import { Password, JWT } from class="tk-str">'@hyperbridge/forge/auth';

const app = new WebApp();

app.post(class="tk-str">'/login', async (c) => {
  const { email, password } = await c.req.json();
  const stored = await c.env.USERS.get(email, { type: class="tk-str">'json' });

  if (!stored || !(await Password.verify(password, stored.hash))) {
    return c.json({ error: class="tk-str">'invalid' }, 401);
  }
  return c.json({
    token: JWT.sign({ email }, c.env.JWT_SECRET),
  });
});

export default app;