portfolio/server/api/auth/verify-password.post.ts

export default defineEventHandler(async (event) => {
  checkRateLimit(event)

  const config = useRuntimeConfig()
  const body = await readBody(event)

  if (body.password === config.adminPassword) {
    const token = createToken()
    return { valid: true, token }
  }

  return { valid: false }
})