app.js

var express = require('express');
const app = express()
var cors = require('cors')
var request = require('request');
const bodyParser = require('body-parser')
const getinfo = require('./getinfo')
const fs = require('fs')
const db = require('./database')
const user = require('./models/User')
const bcrypt = require('bcryptjs')
const jwt = require('jsonwebtoken')
const Post = require('./models/Post')
const mongoose = require('mongoose')
const checkauth = require("./middleware/check-auth")
// authenticating DB connection

db.authenticate().then(() => console.log('database connected')).catch(err => console.log(err))

password = ''
fs.readFile('../../Mongopass.txt', 'utf8', (err, data) => {
  if (err) {
    console.error(err)
    return
  }
  password = data
  //connecting to MongoDB
  mongoose.connect(`mongodb+srv://Nick:${password}@leagueapp.jbkza.mongodb.net/LeaguePosts?retryWrites=true&w=majority`)
    .then(() => {
      console.log('connected to mongodb!')
    })
    .catch(()=>{console.log("CONNECTION FAILED")})

})







finish = false
var key = ''


//reading the API key from a local file
fs.readFile('../../APIkey.txt', 'utf8', (err, data) => {
  if (err) {
    console.error(err)
    return
  }
  key = data
})



db.sync().then(result => {
  console.log("postgres connected")
}).catch(err => {
  console.log(err)
})


app.use(cors())
app.use(bodyParser.json())



app.post('/adduser', (req, res, next) => {
  const post = req.body
  bcrypt.hash(post.password, 10).then(hash => {
    let password = hash
    user.create({
      username: post.username,
      password: password

    }).then(result => { 
      console.log("created user")
      //bad temp solution to error handling, ran into a bug im looking into 
      res.send({response: "200: done"})
    }).catch(err => { 
      res.send({ response: "400: bad request" })
    })
    

  })



})

app.post('/login', (req, res, next) => {
  let fetcheduser
  const post = req.body
  let username = post.username
  //find user in postgres DB by Primary key username
  user.findByPk(username).then(
    user => {
      fetcheduser = user
      //compare the request password with the stored password. NOTE: that we are comparing the hash, not the real password.
      return bcrypt.compare(req.body.password, user.password)
    })
    .then(result => {
      //if the comparison is true, then create the token and send it to the application
      if (result == true) {
        const token = jwt.sign({ user: fetcheduser.user }, "tempsecret", { expiresIn: '1h' })
        res.status(200).json({
          response: token
        })
      }
      else {
        res.status(400).json({
          response: "invalid password for given user"
        })
      }
    }).catch(err => {
      res.status(400).json({
        response: "Error"
      })
    })
})



async function callgetinfo(post, key, res) {
  var response = await getinfo.getinfo(post, key)
  res.send(response)
}

app.post('/api/getinfo', (req, res, next) => {
  const post = req.body
  callgetinfo(post, key, res)
})




app.post('/api/post',checkauth, (req, res, next) => {

  const post = new Post({
    username: req.body.username,
    title: req.body.title,
    body: req.body.body,
    vote: 0,
    voters: []
  })
  console.log(post)
  post.save()
  res.send({ response: "post added" })
})


// app.post('/api/updatecomment',checkauth, (req, res, next) => {
//   console.log(req.body.voters )
//   var query = {'_id': req.body.id};
//   const update = { comments:req.body.comments};
//   Post.findOneAndUpdate(query, update, function(err, doc) {
//     if (err) return res.status(400).json({error:err})
//     return res.status(200).json({message:"updated"})
// });
// })



app.post('/api/getusersposts', (req, res, next) => {
  var user = req.body.username
  console.log(user)
  Post.find({username:user}).then((documents) => {
    console.log(documents)
    res.send({ posts: documents })
  })

})

app.post('/api/updatevote',checkauth, (req, res, next) => {
  console.log(req.body.voters )
  var query = {'_id': req.body.id};
  const update = { vote: req.body.vote, voters:req.body.voters };
  Post.findOneAndUpdate(query, update, function(err, doc) {
    if (err) return res.status(400).json({error:err})
    return res.status(200).json({message:"updated"})
});
})


app.get('/api/getposts', (req, res, next) => {

  Post.find().then((documents) => {
    console.log(documents)
    res.send({ posts: documents })
  })

})


app.delete('/api/deletepost/:id',checkauth,(req, res, next) => {

  console.log(req.params.id)
  Post.deleteOne({_id: req.params.id}).then(result => {
    console.log(result)
    res.status(200).json({message:"Post deleted!"})
  })
  .catch(err => {
    res.status(400).json({message: err})
  })

})


app.get('/',(req, res, next) => {

  res.send({ response: "api up and running!" })
})



module.exports = app