var express = require('express');
var app = express.createServer();

app.use(express.bodyParser());
app.use(express.cookieParser());
app.use(express.session({ secret: "keyboard cat" }));

var db = require('./db.js');
db.init('mongo://...');

app.post('/register', function (req, res, next) {
  if (!req.body.password || !req.body.username) {
    return next(new Error('empty fields'));
  }

  var user = new db.User();
  user.username = req.body.username;
  user.password = req.body.password;
  user.save();
});

app.post('/login', function (req, res, next) {
  if (!req.body.username || !req.body.password) {
    return next(new Error('empty fields'));
  }

  db.User.findOne({
    'username' : req.body.username
  }, {
    'password': 1
  }, function (err, user) {
    if (err) return next(err);

    if (user) {
      bcrypt.compare(req.body.username + req.body.password, user.password, function(err, same) {
        if (err) return next(err);

        if (same) {
          req.session.username = req.body.username;
          res.send('success');
        } else {
          res.send('failure');
        }
      });
    } else {
      res.send('failure');
    }
  });
});

app.listen(3000);