const express = require('express');
const users = express.Router();
const cors = require('cors');
const jwt = require('jsonwebtoken');
const bcrypt = require('bcrypt');

const User = require('../models/User');
users.use(cors())

process.env.SECRET_KEY = 'secret'

//Api starting route
 users.get('/', (req, res) => {
  res.send('User registration and verification')
});

//REGISTER new user
users.post('/register', (req, res) => {
  const userData = {
    user_name: req.body.user_name,
    password: req.body.password
}

User.findOne({
where: {
  user_name: req.body.user_name
 }
})
 .then(user => {
  if(!user) {
    bcrypt.hash(req.body.password, 10, (err, hash) => {
      userData.password = hash
      User.create(userData)
      .then(user => {
        res.json({status: user.user_name + ' registered'})
      })
      .catch(err => {
          res.send('error: ' + err)
      })
    })
  } else {
    res.json({error: 'Uesr already exists'})
  }
})
.catch(err => {
  res.send('error: ' + err)
 })
})

//LOGIN
users.post('/login', (req, res) => {
  User.findOne({
   where: {
    user_name: req.body.user_name
  }
})
.then(user => {
  if(user) {
    if(bcrypt.compareSync(req.body.password, user.password)) {
      let token = jwt.sign(user.dataValues, process.env.SECRET_KEY, {
        expiresIn: 1440
      })
      res.send(token)
    }
  } else {
    res.status(400).json({error: 'User does not exist'})

  }
 })
.catch(err => {
  res.status(400).json({ error: err })
 })
})

module.exports = users