Index: iknow-api/Controllers/AuthController.cs
===================================================================
--- iknow-api/Controllers/AuthController.cs	(revision 5b42c8d2d07de69ce14d68ac140c0400a59f97ad)
+++ iknow-api/Controllers/AuthController.cs	(revision 5b42c8d2d07de69ce14d68ac140c0400a59f97ad)
@@ -0,0 +1,48 @@
+using FinXaccesApi.DTOs;
+using FinXaccesApi.Services;
+using Microsoft.AspNetCore.Mvc;
+
+namespace FinXaccesApi.Controllers
+{
+    [ApiController]
+    [Route("api/[controller]")]
+    public class AuthController : ControllerBase
+    {
+        private readonly IAuthService _authService;
+
+        public AuthController(IAuthService authService)
+        {
+            _authService = authService;
+        }
+
+        [HttpGet("testdb")]
+        public async Task<IActionResult> TestDb()
+        {
+            try
+            {
+                var count = await _authService.GetUsersCountAsync();
+                return Ok(new { message = "DB connection works!", usersCount = count });
+            }
+            catch (Exception ex)
+            {
+                return BadRequest(new { message = "DB connection failed", error = ex.Message });
+            }
+        }
+
+        [HttpPost("register")]
+        public async Task<IActionResult> Register([FromBody] UserDto request)
+        {
+            var result = await _authService.RegisterAsync(request);
+            if (!result) return BadRequest("User already exists");
+            return Ok("User registered successfully");
+        }
+
+        [HttpPost("login")]
+        public async Task<IActionResult> Login([FromBody] UserDto request)
+        {
+            var token = await _authService.LoginAsync(request);
+            if (token == null) return Unauthorized("Invalid credentials");
+            return Ok(new { Token = token });
+        }
+    }
+}