const express = require('express')
const router = express.Router();
const mongoose = require('mongoose');
const bcrypt = require('bcrypt');
const {requireAuth} = require('../middlewares/middleware');

const User = mongoose.model('User')

router.put('/api/user/:id', requireAuth, async (req, res) => {
    const {username, email, password, newPassword} = req.body

    if (password && newPassword) {
        bcrypt.compare(password, req.user.password, async (err, isMatch) => {
            if (err)
                return res.status(400).json({errors: 'Current password is wrong!'});

            if (isMatch) {
                const user = {username, email, newPassword}
                await User.findByIdAndUpdate(req.params.id, user)

                res.send(req.user);
            }
        });
    } else if (username || email) {
        const user = {username, email}
        await User.findByIdAndUpdate(req.params.id, user)

        res.send(req.user);
    }

});

module.exports = router;