const sql = require('mssql');
const express = require('express');
const router = express.Router();
const { logger, accountLogger } = require('../../utils/logger');
const { sendPasswordResetEmail } = require('../../mailer/mailer');
const Joi = require('joi');

// Set up database connection
const { connAccount } = require('../../utils/dbConfig');

// Joi schema for request body validation
const schema = Joi.object({
  email: Joi.string().email().required()
});

// Route for registering an account
router.post('/', async (req, res) => {
  try {
    // Validate request body
    const { error, value } = schema.validate(req.body);
    if (error) {
      return res.status(400).send(error.details[0].message);
    }
        const email = req.body.email;

        if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
            logger.info('Invalid email format');
            return res.status(400).send('InvalidEmailFormat');
        }

        // Use a prepared statement to retrieve the account information
        const pool = await connAccount;
        const request = pool.request();
        request.input('Identifier', sql.VarChar, email);
        const result = await request.execute('GetAccount');
        const row = result.recordset[0];

        if (row && row.Result === 'AccountExists') {
            const emailAdress = row.Email;
            const windycode = row.WindyCode;
            const verificationCode = Math.floor(10000 + Math.random() * 90000).toString();
            const expirationTime = new Date(Date.now() + 600000).toISOString(); // 10 minutes from now

            // Prepare the second statement to insert the verification code information
            const insertRequest = pool.request();
            insertRequest.input('Email', sql.VarChar, email);
            insertRequest.input('VerificationCode', sql.VarChar, verificationCode);
            insertRequest.input('ExpirationTime', sql.DateTime, expirationTime);
            const insertResult = await insertRequest.execute('SetPasswordVerificationCode');
            const insertRow = insertResult.recordset[0];
			
			if (insertRow && insertRow.Result === 'Success') {

            // Send verification code email
            sendPasswordResetEmail(email, verificationCode);

            return res.status(200).send('EmailSent');
			}
			else {
            accountLogger.info(`[Account] Failed to insert verification code for email: ${email}`);
            return res.status(500).send(insertRow.Result);
			}
        } else if (row && row.Result === 'AccountNotFound') {
            return res.status(400).send('AccountNotFound');
        } else {
            return res.status(500).send(row.Result);
        }
    } catch (error) {
        logger.error('[Account] Database query failed: ' + error.message);
        return res.status(500).send('Database query failed: ' + error.message);
    }
});

module.exports = router;