var express = require("express");
var mssql = require("mssql");
var bodyParser = require("body-parser");
var bcrypt = require('bcrypt');
var config = require('./config.js');
var db = require('./db.js');
var app = express();
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({extended:true}));
app.get('/',function (request, response) {
response.end('Demo');
});
app.post('/users', function (request, response) {
var data = request.body;
db.executeSql("select UserId ,UserName from aspnet_Users where UserName='" + data.UserName + "'", function (result, error) {
    if (error) {
        console.log(error);
        response.end(JSON.stringify(error));
    }
    else if (result.length == 0) {
        response.end('Inavlid User');
    }
    else {
        var userId = result[0].UserId;
        var userName = result[0].UserName;
        db.executeSql("select Password, PasswordSalt from aspnet_Membership where UserId='" + userId + "'",
            function (pwdResult, pwdError) {
            if (pwdError) {
                response.end(JSON.stringify(pwdError));
            }
            else {
                var hashPassword = pwdResult[0].Password;
                var salt = pwdResult[0].PasswordSalt;
                bcrypt.compare(data.Password+salt, hashPassword, function (err, res) {
                    if (err) {
                        response.end(err);
                    }
                    if (res) {
                        response.end(res);
                    }
                    else {
                        response.end("Password Mismatch");
                    }
                });
            }

        });
    }

});
});
 app.listen(config.portNumber);