Add RESTful API endpoints

[Copilot]

Adds JSON API layer to complement existing HTML views.

Changes

New API Router (routes/api.js)

• 6 RESTful endpoints for products, purchases, and authentication
• JSON responses with consistent {success, data/error} structure
• Input validation and appropriate HTTP status codes (200, 201, 400, 401, 404, 500)

Endpoints

GET  /api/products              # List products
GET  /api/products/search?q=    # Search products
GET  /api/products/:id          # Get product details
POST /api/purchases             # Create purchase
GET  /api/purchases?username=   # Get user purchases
POST /api/auth                  # Authenticate

Documentation (API_DOCUMENTATION.md)

• Request/response schemas
• cURL examples

Integration

• Registered API router in app.js
• Routes prioritized before HTML routes to avoid path conflicts

Example

curl http://localhost:3000/api/products/1
# Response: {"success": true, "product": {...}}

curl -X POST http://localhost:3000/api/auth \
  -H "Content-Type: application/json" \
  -d '{"username": "admin", "password": "admin"}'
# Response: {"success": true, "message": "Authentication successful", "user": {...}}

Security Notes

Fixed ReDoS in email validation by replacing complex regex with simple string checks. SQL injection vulnerabilities in model layer are pre-existing and intentional per project design.

Original prompt

Create an API and endpoints

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.