When entering wrong username error in the backend because username doesn't exists in the database

[mhd101]

[mhd101]

we can fix by checking that if the userDOC is null then show status 400 else check the password

// first checking whether the user exists in the database if null then throw error else check the password if password is wrong then throw error
if(userDoc === null){
res.status(400).json('wrong credentials')
} else {
const passOk = bcrypt.compareSync(password, userDoc.password);
if (passOk) {
// logged in
jwt.sign({ username, id: userDoc._id }, secret, {}, (err, token) => {
if (err) throw err;
res.cookie('token', token).json({
id: userDoc._id,
username,
});
});
} else {
res.status(400).json('wrong credentials');
}
}