// GET METHOD
// URL: http://localhost:5000/api/[email protected]&password=1234
// /api/sessions output: {"cookie":{"originalMaxAge":600000000,"expires":"2017-09-05T03:54:36.604Z","httpOnly":true,"path":"/"},"isLoggedIn":true}


app.get("/api/login", function(req, res) {
  client.query('SELECT * FROM usuarios WHERE email = $1', [req.query.email], (err, query) => {
    if (err) {
      console.log(err.stack);
    }
    else {
      if(bcrypt.compareSync(req.query.password, query.rows[0].password)){
        req.session.isLoggedIn = true;
        res.status(200).send(req.session);
      }
      else{
        req.session.isLoggedIn = false;
        res.status(200).send(req.session);
      }
    }
  });
});


// POST METHOD
// /api/sessions output: {"cookie":{"originalMaxAge":600000000,"expires":"2017-09-05T03:59:28.290Z","httpOnly":true,"path":"/"}}

app.post("/api/login", function(req, res) {
  var loggedIn = false;
  client.query('SELECT * FROM usuarios WHERE email = $1', [req.body.email], (err, query) => {
    if (err) {
      console.log(err.stack);
    }
    else {
      if(bcrypt.compareSync(req.body.password, query.rows[0].password)){
        req.session.isLoggedIn = true;
        res.status(200).send(req.session);
      }
      else{
        req.session.isLoggedIn = false;
        res.status(200).send(req.session);
      }
    }
  });
});