diff --git a/config/auth.php b/config/auth.php
new file mode 100644
index 0000000..e0c2536
--- /dev/null
+++ b/config/auth.php
@@ -0,0 +1,52 @@
+<?php
+if (session_status() === PHP_SESSION_NONE) {
+    session_start();
+}
+
+function is_logged_in(): bool
+{
+    return isset($_SESSION['user']);
+}
+
+function current_user(): ?array
+{
+    return $_SESSION['user'] ?? null;
+}
+
+function current_role(): string
+{
+    return $_SESSION['user']['role'] ?? 'guest';
+}
+
+function require_login(): void
+{
+    if (!is_logged_in()) {
+        header('Location: login.php');
+        exit;
+    }
+}
+
+function api_require_login(): void
+{
+    if (!is_logged_in()) {
+        http_response_code(401);
+        header('Content-Type: application/json');
+        echo json_encode(['success' => false, 'message' => 'Sesi login tidak ditemukan. Silakan login ulang.']);
+        exit;
+    }
+}
+
+function role_in(array $roles): bool
+{
+    return in_array(current_role(), $roles, true);
+}
+
+function api_require_role(array $roles): void
+{
+    if (!role_in($roles)) {
+        http_response_code(403);
+        header('Content-Type: application/json');
+        echo json_encode(['success' => false, 'message' => 'Akses ditolak untuk peran pengguna ini.']);
+        exit;
+    }
+}
diff --git a/config/database.php b/config/database.php
new file mode 100644
index 0000000..349529a
--- /dev/null
+++ b/config/database.php
@@ -0,0 +1,23 @@
+<?php
+// Sesuaikan konfigurasi database sesuai lingkungan server yang digunakan.
+$DB_HOST = 'localhost';
+$DB_NAME = 'sipantas_webgis';
+$DB_USER = 'root';
+$DB_PASS = '';
+$DB_CHARSET = 'utf8mb4';
+
+try {
+    $pdo = new PDO(
+        "mysql:host={$DB_HOST};dbname={$DB_NAME};charset={$DB_CHARSET}",
+        $DB_USER,
+        $DB_PASS,
+        [
+            PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+            PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+            PDO::ATTR_EMULATE_PREPARES => false,
+        ]
+    );
+} catch (PDOException $e) {
+    http_response_code(500);
+    die('Koneksi database gagal. Pastikan database sipantas_webgis sudah di-import. Detail: ' . htmlspecialchars($e->getMessage()));
+}