authController.js

const bcrypt = require("bcryptjs");
const jwt = require("jsonwebtoken");
const { errResponse } = require("../utils/error");
const Student = require("../models/student");
const Volunteer = require("../models/volunteer");
const Admin = require("../models/admin");

// Register function for Volunteer and Student
const register = async (req, res, next) => {
  const { nim, name, password, confirmPassword, role } = req.body;

  try {
    // Check if account is already registered
    let checkUser = await Admin.findOne({ NIM: nim });
    if (!checkUser) checkUser = await Student.findOne({ NIM: nim });
    if (!checkUser) checkUser = await Volunteer.findOne({ NIM: nim });
    if (checkUser) errResponse("This account is already registered", 409);

    // Check if the password is not the same as confirmPassword
    if (password !== confirmPassword) {
      return res.status(400).json({ message: "Password must be the same" });
    }

    // Hashed password using bcrypt
    const salt = bcrypt.genSaltSync(12);
    const hashedPassword = await bcrypt.hash(password, salt);

    // If the role is volunteer then the code below will be executed
    if (role === "volunteer") {
      // Creating Volunteer data
      const newVolunteer = new Volunteer({
        NIM: nim,
        name: name,
        password: hashedPassword,
      });

      // Save data to the database
      await newVolunteer.save();

      // Creating a token using jsonwebtoken
      jwt.sign({ nim: nim }, process.env.JWT_TOKEN, (error, token) => {
        if (error) {
          errResponse("Internal Server Error", 500);
        }

        res
          .status(201)
          .cookie("token", token, {
            httpOnly: true,
          })
          .json({
            message: "Data has been successfully created!",
            data: newVolunteer,
          });
      });

      return;
    }

    // If the role is other than volunteer then the code below will be executed
    // Creating Student data
    const newStudent = new Student({
      NIM: nim,
      name: name,
      password: hashedPassword,
    });

    // Save data to the database
    await newStudent.save();

    // Creating a token using jsonwebtoken
    jwt.sign({ nim: nim }, process.env.JWT_TOKEN, (error, token) => {
      if (error) {
        errResponse("Internal Server Error", 500);
      }

      res
        .status(201)
        .cookie("token", token, {
          httpOnly: true,
        })
        .json({
          message: "Data has been successfully created!",
          data: newStudent,
        });
    });
  } catch (err) {
    if (!err.statusCode) err.statusCode = 500;
    next(err);
  }
};

// Login function for Admin, Student and Student
const login = async (req, res, next) => {
  const { nim, password } = req.body;

  try {
    const user =
      (await Admin.findOne({ NIM: nim })) ||
      (await Student.findOne({ NIM: nim })) ||
      (await Volunteer.findOne({ NIM: nim }));

    // Check if user doesn't exist
    if (!user) {
      errResponse("No account registered", 400);
    }

    // Compare password
    const isPassword = await bcrypt.compare(password, user.password);
    if (!isPassword) errResponse("Your password is incorrect", 400);

    // Create token
    jwt.sign({ nim: nim }, process.env.JWT_TOKEN, (error, token) => {
      if (error) errResponse("Internal Server Error", 500);

      res
        .status(200)
        .cookie("token", token, {
          httpOnly: false,
        })
        .json({
          message: "Request successfully",
          data: user,
        });
    });
  } catch (err) {
    if (!err.statusCode) err.statusCode = 500;
    next(err);
  }
};

// Logout function for Admin, Volunteer and Student
const logout = async (req, res, next) => {
  const { cookie } = req.headers;

  try {
    const token = cookie.split("=")[1];
    if (!token) {
      errResponse("No token in cookies", 401);
    }

    res
      .status(200)
      .cookie("token", "")
      .json({ message: "Logout successfully" });
  } catch (err) {
    if (!err.statusCode) err.statusCode = 500;
    next(err);
  }
};

module.exports = { register, login, logout };