auth.js

const bcrypt = require("bcrypt");
const { Router } = require("express");
const { toJWT } = require("../auth/jwt");
const authMiddleware = require("../auth/middleware");
const User = require("../models/").user;
const Profile = require("../models").profile;
const Finance = require("../models").finance;
const { SALT_ROUNDS } = require("../config/constants");

const router = new Router();

//signing in (both translator and customer)
router.post("/login", async (req, res, next) => {
  try {
    const { emailAddress, password } = req.body;

    if (!emailAddress || !password) {
      return res
        .status(400)
        .send({ message: "Please provide both email and password" });
    }

    const user = await User.findOne({ where: { emailAddress } });

    if (!user || !bcrypt.compareSync(password, user.password)) {
      return res.status(400).send({
        message: "User with that email not found or password incorrect",
      });
    }

    delete user.dataValues["password"]; // don't send back the password hash
    const token = toJWT({ userId: user.id });
    return res.status(200).send({ token, ...user.dataValues });
  } catch (error) {
    console.log(error);
    return res.status(400).send({ message: "Something went wrong, sorry" });
  }
});

//signup for customer
router.post("/signup", async (req, res) => {
  const { fullName, emailAddress, password } = req.body;
  if (!fullName || !emailAddress || !password) {
    return res.status(400).send("Please provide an email, password and a name");
  }

  try {
    const newUser = await User.create({
      fullName,
      emailAddress,
      password: bcrypt.hashSync(password, SALT_ROUNDS),
      isTranslator: false,
    });

    delete newUser.dataValues["password"]; // don't send back the password hash

    const token = toJWT({ userId: newUser.id });

    res.status(201).json({ token, ...newUser.dataValues });
  } catch (error) {
    if (error.name === "SequelizeUniqueConstraintError") {
      return res
        .status(400)
        .send({ message: "There is an existing account with this email" });
    }

    return res.status(400).send({ message: "Something went wrong, sorry" });
  }
});

//signup for translator
router.post("/signup/translator", async (req, res) => {
  const {
    fullName,
    emailAddress,
    password,
    imageUrl,
    experience,
    writingStyle,
  } = req.body;
  if (!fullName || !emailAddress || !password || !experience || !writingStyle) {
    return res.status(400).send("Please fill in all the fields correctly");
  }

  try {
    const newUser = await User.create({
      fullName,
      emailAddress,
      password: bcrypt.hashSync(password, SALT_ROUNDS),
      imageUrl,
      isTranslator: true,
    });

    const profile = await Profile.create({
      experience,
      writingStyle,
      userId: newUser.id,
    });

    await Finance.create({
      profileId: profile.dataValues.id,
    });

    delete newUser.dataValues["password"]; // don't send back the password hash

    const token = toJWT({ userId: newUser.id });

    res.status(201).json({ token, ...newUser.dataValues });
  } catch (error) {
    if (error.name === "SequelizeUniqueConstraintError") {
      return res
        .status(400)
        .send({ message: "There is an existing account with this email" });
    }

    return res.status(400).send({ message: "Something went wrong, sorry" });
  }
});

// The /me endpoint can be used to:
// - get the user information using only their token
// - checking if a token is (still) valid
router.get("/me", authMiddleware, async (req, res) => {
  // don't send back the password hash
  delete req.user.dataValues["password"];
  res.status(200).send({ ...req.user.dataValues });
});

module.exports = router;