const jwt = require("jsonwebtoken")

module.exports = function(req,res,next){
const token = req.header('auth-token');
if(!token) return res.status(401).send("User access denied")
try{
    const verifyed = jwt.verify(token,process.env.TOKEN_SECRET);
    req.user = verifyed;
    next();
}catch(err){
res.status(400).send("Invalid token")
}
}

router.post("/login",async (req,res)=>{
//VALIDATE DATA
    const {error} =    loginValidation(req.body);
if(error) return res.status(400).send(error.details[0].message)
//Email Exist?
const user = await User.findOne({email:req.body.email})
if(!user) return res.status(400).send('Email of passoword is wrong')
//Pass is correct?
const validPass = await bcrypt.compare(req.body.password,user.password);
if(!validPass ) return res.status(400).send('Email of passoword is wrong')
//CREATE JWT 
const token = jwt.sign({_id:user._id},process.env.TOKEN_SECRET)
res.header('auth-token',token).send(token);

})