const express = require('express');
const router = express.Router();
const User = require('../models/user');
const mid = require('../middleware');

router.get('/profile', mid.requiresLogin, function(req, res, next){
    User.findById(req.session.userId)
        .exec(function( error, user){
            if(error){
                return next(error);
            }else{
                return res.render('profile', {
                    title:'Profile',
                    name: user.name,
                    favorite: user.favoriteBook});
            }
        });

});

// GET /logout
router.get('/logout', function(req, res, next) {
    if (req.session) {
      // delete session object
      req.session.destroy(function(err) {
        if(err) {
          return next(err);
        } else {
          return res.redirect('/');
        }
      });
    }
  });


//GET for /Login
router.get('/login', mid.loggedOut,function(req,res,next){
    return res.render('login', {title: 'Login'})
})

router.post('/login', function(req, res, next){
    if(req.body.email && req.body.password){
        User.authenticate( req.body.email, req.body.password, function(error, user){
            if(error || !user){
                const err = new Error("Wrong Email or Password");
                err.status = 401;
                return next(err);
            }else{
                req.session.userId = user._id;
                return res.redirect('/profile');
            }
        });
    }else{
        const err = new Error('The Password and Email must be filled out');
        err.status =401;
        return next(err);
    }
});


//GET /register
router.get('/register',mid.loggedOut, function(req, res, next) {
    return res.render('register', { title: 'Register' });
});


router.post('/register', function(req, res, next) {
    if (req.body.email &&
        req.body.name &&
        req.body.favoriteBook &&
        req.body.password &&
        req.body.confirmPassword
    ) {
        if (req.body.password !== req.body.confirmPassword) {
            const err = new Error('Passwords must both match');
            err.status = 400;
            return next(err);
        }
        if (!req.body.email){
            const err = new Error('This email has already been used please use another');
            err.status = 400;
            return next(err);
        }

        const userData = {
            email: req.body.email,
            name: req.body.name,
            favoriteBook: req.body.favoriteBook,
            password: req.body.password,
        }

/*Using the Schema create method to insert the data into mongo
after the user has created their profile for the page*/
        User.create(userData, function(error, user ){
            if(error){
                return next(error);
            } else {
                req.session.userId = user._id;
                return res.redirect("/profile");
            }
        } )
    } else {
        const err = new Error('All fields must be filled out');
        err.status = 400;
        return next(err);
    }
});


// GET /
router.get('/', function(req, res, next) {
    return res.render('index', { title: 'Home' });
});

// GET /about
router.get('/about', function(req, res, next) {
    return res.render('about', { title: 'About' });
});

// GET /contact
router.get('/contact', function(req, res, next) {
    return res.render('contact', { title: 'Contact' });
});


module.exports = router;





 `

 App.js
 const express = require('express');
 const bodyParser = require('body-parser');
 const mongoose = require('mongoose');
 const session = require('express-session');
 const MongoStore = require('connect-mongo')(session);
 const app = express();

//mongodb connection
mongoose.connect('mongodb://localhost:27017/myapp');
const db = mongoose.connection;

//Checks for any errors in the database
db.on('error', console.error.bind(console, 'connection error'));

//Use the Express-session middleware that was required above
app.use(session({
    secret: "Kevin's here",
    resave: true,
    saveUninitialized: false,
    store: new MongoStore({
        mongooseConnection: db
    })
}));

//This will allow the templates to use the session ID
app.use(function (req, res, next){
    res.locals.currentUser =  req.session.userId;
    next();
})


// parse incoming requests
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));

// serve static files from /public
app.use(express.static(__dirname + '/public'));

// view engine setup
app.set('view engine', 'pug');
app.set('views', __dirname + '/views');

// include routes
var routes = require('./routes/index');
app.use('/', routes);

// catch 404 and forward to error handler
app.use(function(req, res, next) {
    var err = new Error('File Not Found');
    err.status = 404;
    next(err);
});

// error handler
// define as the last app.use callback
app.use(function(err, req, res, next) {
    res.status(err.status || 500);
    res.render('error', {
        message: err.message,
        error: {}
    });
});

// listen on port 3000
app.listen(3000, function() {
    console.log('Express app listening on port 3000');
});