const jwt=require('jsonwebtoken');
const bcrypt=require('bcrypt');
const {TOKEN_SECRET, COOKIE_NAME}= require('../config')

const userService=require('../services/userService');

module.exports=()=> function(req, res, next){
if (parseToken(req,res)){

req.auth={
async register(username,password){
const token= await register(username, password);
res.cookie(COOKIE_NAME, token)
},
async login(username, password){
const token=await login(username, password);
res.cookie(COOKIE_NAME,token);
},
logout(){
res.clearCookie(COOKIE_NAME);
}
};


next();
}
};


async function register(username, password){
//adapt params and validate
const existing=await userService.getUserByUsername(username);
if (existing){
throw new Error ('Username is taken!');
}

const hashedPassword=await bcrypt.hash(password, 10);
const user=await userService.createUser(username, hashedPassword);

//logi user
return generateToken(user);
}

async function login(username,password){
const user=await userService.getUserByUsername(username);
console.log(user)
if (!user){
throw new Error ('No such user');
}

const hasMatch=await bcrypt.compare(password, user.hashedPassword);
console.log(password, user.hashedPassword)
if (!hasMatch){
throw new Error ('Incorrect password!')
}

return generateToken(user);

}

function generateToken(userData){
return jwt.sign({
_id:userData._id,
username:userData.username
}, TOKEN_SECRET);

}

function parseToken(req,res){
const token=req.cookies[COOKIE_NAME];
if (token){
try {
const userData=jwt.verify(token, TOKEN_SECRET);
req.user=userData;
} catch (err) {
res.clearCookie(COOKIE_NAME);
res.redirect('/auth/login');

return false;
}
}
return true;
}