Initial commit: lottery project structure

Add core project files including:
- Client and server directories
- Backup script
- Package configuration
- Git ignore rules

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

server/routes/auth.js

@@ -0,0 +1,52 @@
+const express = require('express');
+const bcrypt = require('bcryptjs');
+const db = require('../db/init');
+const { generateToken } = require('../middleware/auth');
+
+const router = express.Router();
+
+// 注册
+router.post('/register', (req, res) => {
+  const { username, password } = req.body;
+
+  if (!username || !password) {
+    return res.status(400).json({ error: '用户名和密码不能为空' });
+  }
+
+  try {
+    const hashedPassword = bcrypt.hashSync(password, 10);
+    const stmt = db.prepare('INSERT INTO users (username, password) VALUES (?, ?)');
+    const result = stmt.run(username, hashedPassword);
+
+    const user = { id: result.lastInsertRowid, username };
+    const token = generateToken(user);
+
+    res.json({ user, token });
+  } catch (err) {
+    if (err.code === 'SQLITE_CONSTRAINT_UNIQUE') {
+      return res.status(400).json({ error: '用户名已存在' });
+    }
+    res.status(500).json({ error: '注册失败' });
+  }
+});
+
+// 登录
+router.post('/login', (req, res) => {
+  const { username, password } = req.body;
+
+  if (!username || !password) {
+    return res.status(400).json({ error: '用户名和密码不能为空' });
+  }
+
+  const stmt = db.prepare('SELECT * FROM users WHERE username = ?');
+  const user = stmt.get(username);
+
+  if (!user || !bcrypt.compareSync(password, user.password)) {
+    return res.status(401).json({ error: '用户名或密码错误' });
+  }
+
+  const token = generateToken(user);
+  res.json({ user: { id: user.id, username: user.username }, token });
+});
+
+module.exports = router;