server.js

// load .env data into process.env
require("dotenv").config();

// Web server config
const sassMiddleware = require('./lib/sass-middleware');
const express = require('express');
const morgan = require('morgan');
const cookieSession = require('cookie-session');
const bcrypt = require('bcryptjs');

const methodOverride = require('method-override');
const { generateRandomString } = require('./lib/helper-functions');
const { getUserInfo } = require('./db/queries/index');
const { db } = require('./db/connection');

const PORT = process.env.PORT || 8080;
const app = express();

app.set("view engine", "ejs");

// Load the logger first so all (static) HTTP requests are logged to STDOUT
// 'dev' = Concise output colored by response status for development use.
//         The :status token will be colored red for server error codes, yellow for client error codes, cyan for redirection codes, and uncolored for all other codes.
app.use(morgan("dev"));
app.use(
  cookieSession({
    name: "session",
    keys: [generateRandomString(10)],
    maxAge: 12 * 60 * 60 * 1000,
  })
);
app.use(methodOverride("_method"));
app.use(express.urlencoded({ extended: true }));
app.use(
  "/styles",
  sassMiddleware({
    source: __dirname + "/styles",
    destination: __dirname + "/public/styles",
    isSass: false, // false => scss, true => sass
  })
);
app.use(express.static("public"));
app.use(express.json());

// Separated Routes for each Resource
// Note: Feel free to replace the example routes below with your own
const userApiRoutes = require("./routes/users-api");
const quizzesApiRoutes = require("./routes/quizzes-api");
const questionsApiRoutes = require("./routes/questions-api");
const attemptsApiRoutes = require("./routes/attempts-api");
const attemptAnswersApiRoutes = require("./routes/attempt_answers-api");
const usersRoutes = require("./routes/users");
const {
  authMiddleware,
  router: authRoutes,
} = require("./routes/authentication");
const attemptsRoutes = require("./routes/attempts");
const quizzesRoutes = require("./routes/quizzes");

// Mount all resource routes

// m3Note: use authMiddleware later to secure routes.
// app.use('/api/users', authMiddleware, userApiRoutes);
app.use("/api/users", userApiRoutes);
app.use("/api/quizzes", quizzesApiRoutes);
app.use("/api/questions", questionsApiRoutes);
app.use("/api/attempts", attemptsApiRoutes);
app.use("/api/attemptAnswers", attemptAnswersApiRoutes);
app.use("/users", usersRoutes);
app.use("/auth", authRoutes);
app.use("/attempts", attemptsRoutes);
app.use("/quizzes", quizzesRoutes);
// Note: mount other resources here, using the same pattern above

// Home page
// Warning: avoid creating more routes in this file!
// Separate them into separate routes files (see above).

app.get("/", (req, res) => {
  let user = req.session.user;
  if (!user) {
    user = undefined;
  } else {
    user = req.session.user;
  }
  // Else: fetch the user info
  res.render("index", { user });
});


app.get('/login', (req, res) => {
  // If user is signed in already, just redirect to the homepage.
  let userId = req.session.userId;
  if (userId) {
    res.redirect('/');
  }

  // We don't have a logged in user so show them the login form
  res.render('login', {
    user: undefined,
    errorMessages: [],
    showRegistrationLink: false
  }); // Pass the user data to the login view
});

app.post('/login', (req, res) => {
  const { email, password } = req.body;

  // Query the database to check if the user exists with the given email
  const loginQuery = `
    SELECT id, username, email, password
    FROM users
    WHERE email = $1;
  `;

  const queryParams = [email];

  db.query(loginQuery, queryParams)
    .then(data => {
      if (data.rows.length === 1) {
        const user = data.rows[0];
        const hashedPassword = user.password;

        // Compare the hashed password from the database with the provided password
        bcrypt.compare(password, hashedPassword, (err, result) => {
          if (err || !result) {
            // Set the error message for rendering
            const error = 'Invalid credentials';
            console.log('Error:', error); // Log the error message
            res.render('login', { errorMessages: [error], user: undefined, showRegistrationLink: true });
          } else {
            // User is authenticated, set session
            req.session.userId = user.id;
            req.session.user = user;
            res.redirect('/');
          }
        });
      } else {
        // No user found with the provided email, set the error message for rendering
        const error = 'User not found';
        console.log('Error:', error); // Log the error message
        res.render('login', { errorMessages: [error], user: undefined, showRegistrationLink: true });
      }
    })
    .catch(err => {
      console.error('Error during login:', err);
      res.status(500).json({ error: 'Internal server error' });
    });
});

app.get('/register', (req, res) => {
  res.render('register', { user: undefined, errors: [] });
});

app.post('/register', (req, res) => {
  const { username, email, password, confirmPassword } = req.body;

  // Query the database to check if the email is already in use
  const checkEmailQuery = `
    SELECT email
    FROM users
    WHERE email = $1;
  `;

  const emailCheckParams = [email];

  db.query(checkEmailQuery, emailCheckParams)
    .then(data => {
      if (data.rows.length > 0) {
        // Email is already in use, set the error message for rendering
        const error = 'Email is already registered';
        console.log('Error:', error); // Log the error message
        res.render('register', { errors: [error], user: undefined });
      } else {
        // Email is not in use, hash the password and insert a new user record into the database
        bcrypt.hash(password, 10, (err, hashedPassword) => {
          if (err) {
            console.error('Error hashing password:', err);
            res.status(500).json({ error: 'Internal server error' });
          } else {
            const insertUserQuery = `
              INSERT INTO users (username, email, password)
              VALUES ($1, $2, $3)
              RETURNING id;
            `;

            const insertUserParams = [username, email, hashedPassword];

            db.query(insertUserQuery, insertUserParams)
              .then(newUser => {
                const user = {
                  id: newUser.rows[0].id,
                  username,
                  email,
                };

                // User registration successful, set session
                req.session.userId = user.id;
                req.session.user = user;

                res.redirect('/');
              })
              .catch(err => {
                console.error('Error inserting user:', err);
                res.status(500).json({ error: 'Internal server error' });
              });
          }
        });
      }
    })
    .catch(err => {
      console.error('Error checking email:', err);
      res.status(500).json({ error: 'Internal server error' });
    });
});

app.post('/logout', (req, res) => {
  req.session = null;
  res.redirect('/');
});

app.listen(PORT, () => {
  console.log(`Example app listening on port ${PORT}`);
});