auth.js

const db = require('./db/models')

const loginUser = (req, res, user) => {
    req.session.auth = {
        userId: user.id,
    };
};

const logoutUser = (req, res) => {
    delete req.session.auth;
    // res.redirect('/users/signup')           // add this to check for delete feature.
}

const requireAuth = (req, res, next) => {
    if (!res.locals.authenticated) {
        return res.redirect('/users/login');
    }
    return next();
}

const restoreUser = async (req, res, next) => {
    // console.log("SESSION:", req.session);

    if (req.session.auth) {
        const { userId } = req.session.auth;

        try {
            const user = await db.User.findByPk(userId);

            if (user) {
                res.locals.authenticated = true;
                res.locals.user = user;
                next()
            }
        } catch (err) {
            res.locals.authenticated = false;
            next(err)
        }
    } else {
        res.locals.authenticated = false;
        next();
    }
}


module.exports = {
    loginUser,
    logoutUser,
    requireAuth,
    restoreUser
}