npm install passport passport-local passport-jwt

import passport from 'passport';
import { Strategy as LocalStrategy } from 'passport-local';
import { Strategy as JwtStrategy, ExtractJwt } from 'passport-jwt';

passport.use(new LocalStrategy(async (username, password, done) => {
  const user = await User.findOne({ username });
  if (!user || !await user.verifyPassword(password)) return done(null, false);
  return done(null, user);
}));

passport.use(new JwtStrategy(
  { jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(), secretOrKey: process.env.JWT_SECRET },
  async (payload, done) => {
    const user = await User.findById(payload.sub);
    return user ? done(null, user) : done(null, false);
  }
));

app.post('/login', passport.authenticate('local'), (req, res) => res.json({ token: signJwt(req.user) }));
app.get('/profile', passport.authenticate('jwt', { session: false }), (req, res) => res.json(req.user));