const express = require('express');
const session = require('express-session');
const mysql = require('mysql');
const bodyParser = require('body-parser');
const bcrypt = require('bcrypt');


const app = express();
const PORT = process.env.PORT || 3000;
require('dotenv').config();

const mysqlConfig = {
  host: process.env.host,
  user: process.env.user,
  password: process.env.password,
  database: process.env.database,
  timezone: 'Z', // Set the timezone to UTC
};

const mysqlConnection = mysql.createConnection(mysqlConfig);
mysqlConnection.connect((err) => {
  if (err) {
    console.error('Error connecting to MySQL:', err);
    return;
  }
  console.log('Connected to MySQL');
});

app.use(bodyParser.urlencoded({ extended: true }));
app.use(session({ secret: 'your_session_secret', resave: false, saveUninitialized: true }));
app.set('view engine', 'ejs');

app.get('/login', (req, res) => {
  res.render('login');
});

function isAuthenticated(req, res, next) {
  if (req.session && req.session.authenticated) {
    return next();
  } else {
    res.redirect('/login');
  }
}

app.post('/login', (req, res) => {
  let { username, password } = req.body;
  username = username.trim();

  const loginSql = 'SELECT * FROM users WHERE username = ? AND password = ?';
  const updateLastLoginSql = 'UPDATE users SET lastLogin = CURRENT_TIMESTAMP WHERE username = ?';

  // Check credentials and retrieve user information
  const connection = mysql.createConnection(mysqlConfig);

  connection.connect();

  connection.query(loginSql, [username, password], (error, results) => {
    if (error) {
      console.error('Error executing login query:', error);
      res.status(500).send('Internal Server Error');
      connection.end(); // Close the connection in case of an error
      return;
    }

    if (results.length === 0) {
      res.status(401).send('Invalid username or password');
      connection.end(); // Close the connection when not needed anymore
    } else {
      // Update lastLogin field for the user
      connection.query(updateLastLoginSql, [username], (updateError, updateResults) => {
        if (updateError) {
          console.error('Error updating lastLogin:', updateError);
          res.status(500).send('Internal Server Error');
          connection.end(); // Close the connection in case of an error
          return;
        }

        // Check if the update affected any rows
        if (updateResults.affectedRows > 0) {
          // Set session data for authentication
          req.session.authenticated = true;
          req.session.username = username;

          // Redirect to the home page or any other protected route
          res.redirect('/home');
        } else {
          res.status(500).send('Error updating lastLogin. No rows affected.');
        }

        connection.end(); // Close the connection when not needed anymore
      });
    }
  });
});

// Update your /home route to retrieve the overall last 10 logins for all users
app.get('/home', isAuthenticated, (req, res) => {
  // Retrieve the overall last 10 logins for all users
  const loginsQuery = 'SELECT username, lastLogin FROM users ORDER BY lastLogin DESC LIMIT 10';

  mysqlConnection.query(loginsQuery, (error, loginResults) => {
    if (error) {
      console.error('Error executing login logs query:', error);
      res.status(500).send('Internal Server Error');
      return;
    }

    // Log the results on the server side
    console.log('Login Logs on Server:', loginResults);

    // Render the home page with login logs data
    res.render('home', { username: req.session.username, loginLogs: loginResults });
  });
});
app.get('/inusers', isAuthenticated, (req, res) => {
  // Fetch all user data from the database
  const allUsersQuery = 'SELECT * FROM users';

  mysqlConnection.query(allUsersQuery, (error, allUsers) => {
    if (error) {
      console.error('Error fetching all users:', error);
      res.status(500).send('Internal Server Error');
      return;
    }

    // Render the inusers page with JSON data
    res.render('inusers', { allUsers });
  });
});

app.post('/createUser', async (req, res) => {
  try {
    const { name, username, email, password, jobTitle } = req.body;

    // Hash the password using bcrypt
    const hashedPassword = await bcrypt.hash(password, 10);

    // Start a transaction
    mysqlConnection.beginTransaction((transactionErr) => {
      if (transactionErr) {
        console.error('Error starting transaction:', transactionErr);
        res.status(500).json({ error: 'Internal Server Error' });
        return;
      }

      // Define the insert query
      const insertUserQuery = 'INSERT INTO users (name, username, email, password, lastLogin, jobTitle) VALUES (?, ?, ?, ?, NULL, ?)';

      // Log the query and its parameters
      console.log('Insert Query:', insertUserQuery);
      console.log('Query Parameters:', [name, username, email, hashedPassword, jobTitle]);

      // Execute the query with user data
      mysqlConnection.query(insertUserQuery, [name, username, email, hashedPassword, jobTitle], (queryErr, results) => {
        if (queryErr) {
          console.error('Error executing query:', queryErr);

          // Rollback the transaction in case of an error
          mysqlConnection.rollback((rollbackErr) => {
            if (rollbackErr) {
              console.error('Error rolling back transaction:', rollbackErr);
            }
            res.status(500).json({ error: 'Internal Server Error' });
          });
          return;
        }

        // Commit the transaction
        mysqlConnection.commit((commitErr) => {
          if (commitErr) {
            console.error('Error committing transaction:', commitErr);
            res.status(500).json({ error: 'Internal Server Error' });
            return;
          }

          // Log the results of the query
          console.log('Query Results:', results);

          // Respond with a success message
          res.status(201).json({ message: 'User created successfully' });
        });
      });
    });
  } catch (error) {
    console.error('Error creating user:', error);
    res.status(500).json({ error: 'Internal Server Error' });
  }
});




app.use(express.static('views'));

app.listen(PORT, () => {
  console.log(`Server is running on port ${PORT}`);
});