Cafegent backend: table management API using Express JS

Question

I a new to coding and certainly new to this site. I apologise advance if I offend anyone or any rules.

What should I do to further improve the code. Any suggestions would be appreciated.

This code for Node JS manages tables and orders in a local cafe.

Improvements in mind:

• Admin identification (Using JWT)
• Google OAuth 2 (is it better to implement on the server side or client side?)

Questions:

• Should I add Google OAuth on server side or client side?
• I would be hosting this code for a client. Is it safe for the project to be publically available on GitHub?

const express = require("express");
const table = require("../models/tables");
const router = express.Router();
const jwt = require("jsonwebtoken");

const JWT_SECRET = process.env.JWT_SECRET;

/**----------------------------------------------------------- Create a new table ---------------------------------------------------------------------/
 * *Endpoint: "/api/table/create"
 * ! Admin only API
 * TODO: create the specified number of tables from the req body.
 */

router.post("/create", async (req, res) => {
  try {
    const newTable = await table.create({
      tableNo: req.body.tableNo,
    });
    res.status(200).json(newTable);
  } catch (error) {
    console.log(error.message);
    res.status(500).send("Some error occured");
  }
});

/**---------------------------------------------------------- Create a new table ----------------------------------------------------------------------/
 * * Endpoint: "/api/table/book"
 * * Public API
 * @param bookTable : fetches and stores the information about the table to be booked
 */

router.put("/book", async (req, res) => {
  try {
    let bookTable = await table.findOne({ tableNo: req.body.tableNo });

    // Checking if the table is already booked or not
    if (!bookTable.availability) {
      return res.status(200).send("Table already booked");
    }

    //* Updating table if it is available
    bookTable.tableNo = req.body.tableNo;
    bookTable.phone = req.body.phone;
    bookTable.availability = false;
    bookTable.save();

    // Creating and sending JWT.
    const data = {
      tableNo: bookTable.tableNo,
      phone: bookTable.phone,
      _id: bookTable._id,
    };
    const authToken = jwt.sign(data, JWT_SECRET);
    res.json({ authToken });
  } catch (error) {
    console.log(error.message);
    res.status(500).send("Some error occured");
  }
});

module.exports = router;