Implement multi-session and device session management

[NateIsern]

Implement user authentication, session management, and security features.

• User Model Changes:

  • Add password, roles, sessions, and email fields to UserSchema.

• Session Model:

  • Create Session model with userId, device, ip, token, and expiresAt fields.

• Authentication Routes:

  • Add routes for user sign up, sign in, password recovery, and session management.
  • Implement JWT-based authentication with access and refresh tokens.
  • Implement secure password handling using bcrypt.
  • Implement rate limiting, brute force protection, and CSRF protection.
  • Implement Multi-Factor Authentication (MFA).

• Middleware:

  • Add authentication middleware for JWT verification and role-based access control.
  • Add security middleware for rate limiting, brute force protection, and CSRF protection.
  • Add MFA middleware for verifying MFA codes.

• Utility Functions:

  • Add utility functions for generating and verifying JWT tokens.
  • Add utility functions for hashing and verifying passwords using bcrypt.
  • Add utility functions for integrating Socket.io for real-time session tracking.

• Server Integration:

  • Import and use the new authentication, security, and MFA middleware.
  • Import and use the new auth routes.
  • Integrate Socket.io for real-time session tracking.

---

For more details, open the Copilot Workspace session.