const express = require('express');
const router = express.Router();
const Joi = require('joi');
const mysqlConnection = require('../database');

router.all('/', function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "X-Requested-With");
  next();
 });

//viewing all users data
router.get('/',(req,res)=>{
  mysqlConnection.query('SELECT * FROM users',(err, rows, fields)=>{
      if(!err){
          res.json(rows);
      } else {
          console.log(err);
          //mysqlConnection.end();
      }
  });
});

//username check if exist
router.get('/userinfo',(req,res)=>{
  const username = req.query.username;
  var query = 'SELECT * FROM users WHERE username = "'+username+'"';
  mysqlConnection.query(query, (err, rows, fields)=>{
    if(!err){
        res.json(rows);
    } else {
        console.log(err);
    }
  });
});

//select userinfo with UUID
router.get('/uuidinfo',(req,res)=>{
  const uuid = req.query.uuid;
  var query = 'SELECT * FROM users WHERE uuid = "'+uuid+'"';
  mysqlConnection.query(query, (err, rows, fields)=>{
    if(!err){
        res.json(rows);
    } else {
        console.log(err);
    }
  });
});

//viewing a specific user's data via ID & password
router.get('/userlogin',(req,res)=>{
  const username = req.query.username, password = req.query.password;
  var query = 'SELECT * FROM users WHERE username = "'+username+'" AND password ="'+password+'"';
  mysqlConnection.query(query, (err, rows, fields)=>{
    if(!err){
        res.json(rows);
    } else {
        console.log(err);
    }
  });
});

//update UUID if need be
router.put('/:username', (req,res) => {
  const  { uuid, username }  = req.body;
  const  id  = req.params;
  const query = 'UPDATE users SET uuid = ? WHERE username = ?';
  mysqlConnection.query(query, [ uuid, username ], (err, rows, fields) =>{
    if(!err){
      res.json({Status: '1'});
    } else {
      console.log(err);
    }
  });
});


//Adding a new user
router.post('/userregister', (req,res)=>{
  const  { username, password, email, uuid, securityquestion, securityanswer }  = req.body;
  const query = `
  INSERT INTO users ( username, password, email, uuid, securityquestion, securityanswer ) VALUES ( ?, ?, ?, ?, ?, ?);
  `;
  mysqlConnection.query(query,[username, password, email, uuid, securityquestion, securityanswer],(err, rows, fields) => {
    if(!err) {
        res.json({ Status: '1'});
    } else {
        console.log(err);
    }
  });
});

//Updating user data
router.put('/:id', (req,res) => {
  const { username, password, account_balance } = req.body;
  const  id  = req.params;
  const query = 'UPDATE users SET username = ?, password = ?, account_balance = ? WHERE id = ?';
  mysqlConnection.query(query, [ username, password, account_balance, id ], (err, rows, fields) =>{
    if(!err){
      res.json({Status: 'User Successfully Updated'});
    } else {
      console.log(err);
    }
  });
});

//deleting user database
router.delete('/:id', (req,res) =>{
  const id  = req.params;
  const query = 'DELETE FROM users WHERE id = ?';
  mysqlConnection.query(query, [ id ], (err, rows, fields) => {
    if (!err) {
      res.json({status:'Data Successfully Deleted'})
    } else {
      console.log(err);
    }
  });
});
module.exports = router;