auth

var express = require('express');
var router = express.Router();
var jwt = require('jsonwebtoken');
var mongoose = require('mongoose');
var db = require('../mongodb/mongo');

function isAuthenticated(req, res, next){
  var token = req.body.token || req.query.token || req.headers.token;
  if (token) {
    jwt.verify(token, 'jwtsecret', function(err, decoded){
      if(err){
        res.json({message: 'Gagal auth token'});
      }else {
        req.decoded = decoded;
        next();
      }
    });
  }else {
    return res.status(430).send({message: 'Tidak ada token'});
  }
}

/* GET users listing. */
router.get('/', function(req, res, next) {
  res.send('respond with a resource');
});

router.post('/login', function(req, res, next){
  db.users.findOne({username: req.body.username}, function(err,data){
    if (data) {
      if (data.password === req.body.password) {
        var token = jwt.sign(data, 'jwtsecret',{
          algorithm: 'HS256',
        });
        res.json({message:'Berhasil login', token: token});
      }else {
        res.json({message:'Password tidak cocok'});
      }
    }else {
      res.json({message: 'Username tidak di temukan'});
    }
  });
});

router.get('/private', isAuthenticated, function(req, res, next){
  res.json({message: 'Hanya bisa di akses dengan token'});
});

router.get('/public', function(req, res, nest){
  res.json({message: 'Semua bisa akses'});
});

module.exports = router;