app.js

require('dotenv').config();
const express = require('express')
const app = express()
const PORT = process.env.port || 3000;
const path = require('path')
const hbs = require('hbs')
const fetch = require('node-fetch')
const jwt = require('jsonwebtoken')
const cookieParser = require('cookie-parser')
const { v4: uuidv4 } = require('uuid')
const Sib = require('sib-api-v3-sdk');
const multer = require('multer');
const validator = require('validator')
app.use(express.static('public'))
app.use(express.json())
app.use(express.urlencoded({ extended: true }))
app.use(cookieParser())
app.use((req, res, next) => {
    res.header('Cache-Control', 'private, no-cache, no-store, must-revalidate');
    res.header('Pragma', 'no-cache');
    res.header('Expires', '-1');
    next();
});
app.set('view engine', 'hbs');
app.set('views', './templates/views');
hbs.registerPartials(path.join(__dirname, 'templates/partials'));
const con = require('./src/db.js')
const otp = require('./src/otp.js')
const Data = require('./models/data.js')
const bcrypt = require('bcryptjs');
const auth = require('./middleware/auth.js');
const storage = require('./middleware/storage.js');
const upload = multer({ storage })
const defaultClient = Sib.ApiClient.instance;
const apiKey = defaultClient.authentications['api-key'];
apiKey.apiKey = process.env.BLUE_KEY;
const tranEmailApi = new Sib.TransactionalEmailsApi()

app.get('/', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    res.render("home.hbs", {
        iname: 'Hi, ' + user
    })
})

app.get('/shop', auth, async (req, res) => {
    //console.log(req.query.cat);
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    if (req.query.cat) res.render("uCategory.hbs", {
        shop: req.query.cat,
        iname: 'Hi, ' + user
    })
    else res.render("uShop.hbs", {
        iname: 'Hi, ' + user
    })
})

app.get('/product', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    let check = 0, fav = 0;
    const li = tmp.cart, flist = tmp.favourites;
    for (let i = 0; i < li.length; i++) if (li[i] === req.query.id) check = 1;
    for (let i = 0; i < flist.length; i++) if (flist[i] === req.query.id) fav = 1;
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    if (req.query.id && req.query.cat) {
        res.render("uProduct.hbs", {
            iname: 'Hi, ' + user,
            id: req.query.id,
            cat: req.query.cat,
            check: check,
            fav: fav,
            image: (tmp.image) ? tmp.image.slice(7) : 'https://mdbcdn.b-cdn.net/img/Photos/new-templates/bootstrap-chat/ava3.webp'
        })
    }
    else if (req.query.uid) {
        const user = await Data.findOne({ _id: req.query.uid });
        res.send({
            image: (user.image) ? user.image.slice(7) : 'https://mdbcdn.b-cdn.net/img/Photos/new-templates/bootstrap-chat/ava3.webp',
            name: user.name
        })
    }
    else res.sendFile(__dirname + '/src/error.html')
})

app.get('/user', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    const full = tmp.name.split(" ");
    let name = '';
    for (let i = 0; i < full.length; i++) name += (full[i].charAt(0).toUpperCase() + full[i].slice(1) + ' ');
    // name = name.slice(0, name.length - 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    res.render("profile.hbs", {
        iname: 'Hi, ' + user,
        name: name,
        email: tmp.email,
        mobile: (tmp.mobile) ? tmp.mobile : 'Add Mobile No.',
        address: (tmp.address) ? tmp.address : 'Add Address',
        image: (tmp.image) ? tmp.image.slice(7) : 'https://mdbcdn.b-cdn.net/img/Photos/new-templates/bootstrap-chat/ava3.webp'
    })
})

app.post('/user', auth, async (req, res) => {
    const id = req.id
    if (!validator.isEmail(req.body.email)) return res.send(false)
    try {
        const tmp = await Data.findOneAndUpdate({ _id: id }, {
            $set: {
                name: req.body.name,
                email: req.body.email,
                mobile: req.body.mobile,
                address: req.body.address
            }
        })
        console.log(tmp);
        res.send(true);
    } catch (error) {
        res.sendStatus(502);
    }
})

app.post('/upload', auth, upload.single('image'), async (req, res) => {
    const id = req.id
    console.log(req.body);
    console.log(req.file);
    try {
        const tmp = await Data.findOneAndUpdate({ _id: id }, {
            $set: {
                image: req.file.path
            }
        })
        // console.log(tmp);
        res.redirect('/user');
    } catch (error) {
        res.sendStatus(502);
    }
})

app.get('/search', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    if (req.query.s) {
        res.render("uSearch.hbs", {
            iname: 'Hi, ' + user,
            query: req.query.s
        })
    }
    else res.sendFile(__dirname + '/src/error.html')
})

app.get('/pay', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    if (req.query.order) {
        const li = tmp.cart;
        await Data.updateOne({ _id: id }, {
            $set: {
                cart: [],
                orders: tmp.cart
            }
        })
        res.render("confirm.hbs",)
    }
    else res.render("checkout.hbs", {
        iname: 'Hi, ' + user,
        id: id
    })
})

app.get('/wishlist', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id }).select({
        name: 1,
        favourites: 1
    });
    if (req.query.id) res.send(tmp)
    else {
        let user = tmp.name.split(" ", 1);
        user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
        res.render("wishlist.hbs", {
            iname: 'Hi, ' + user,
            id: id
        })
    }
})

app.get('/orders', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id }).select({
        name: 1,
        orders: 1
    });
    if (req.query.id) res.send(tmp)
    else {
        let user = tmp.name.split(" ", 1);
        user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
        res.render("orders.hbs", {
            iname: 'Hi, ' + user,
            id: id
        })
    }
})

app.post('/wishlist', auth, async (req, res) => {
    try {
        await Data.updateOne({ _id: req.id }, {
            $push: { favourites: req.body.id }
        })
        res.send(true)
    } catch (error) {
        res.send(false)
    }
})

app.delete('/wishlist', auth, async (req, res) => {
    try {
        await Data.updateOne({ _id: req.id }, {
            $pull: { favourites: req.body.id }
        })
        res.send(true)
    } catch (error) {
        res.send(false)
    }
})

app.get('/cart', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id }).select({
        name: 1,
        cart: 1
    });
    if (req.query.id) res.send(tmp)
    else {
        let user = tmp.name.split(" ", 1);
        user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
        res.render("cart.hbs", {
            iname: 'Hi, ' + user,
            id: id
        })
    }
})

app.post('/cart', auth, async (req, res) => {
    try {
        await Data.updateOne({ _id: req.id }, {
            $push: { cart: req.body.id }
        })
        res.send(true)
    } catch (error) {
        res.send(false)
    }
})

app.delete('/cart', auth, async (req, res) => {
    try {
        await Data.updateOne({ _id: req.id }, {
            $pull: { cart: req.body.id }
        })
        res.send(true)
    } catch (error) {
        res.send(false)
    }
})

app.get('/about', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    res.render("about.hbs", {
        iname: 'Hi, ' + user
    })
})

app.get('/login', (req, res) => {
    if (req.cookies.jwt) res.redirect('/');
    else res.sendFile(__dirname + '/src/login.html')
})

app.post('/login', async (req, res) => {
    //console.log(req.body);
    try {
        const tmp = await Data.findOne({ email: req.body.email })
        if (!tmp) res.status(400).render('bad.hbs', {
            message: 'email id does not exists'
        })
        else if (!(await bcrypt.compare(req.body.password, tmp.password))) res.status(400).render('bad.hbs', {
            message: 'password is incorrect'
        })
        else {
            const id = tmp._id.valueOf();
            //console.log(id.valueOf()); // get _id as a string from ObjectId
            //console.log(id);
            const uuid = uuidv4();
            console.log(uuid);
            const obj = {
                _id: id,
                rid: uuid
            }
            const token = jwt.sign(obj, process.env.SECRET_KEY)
            res.cookie('jwt', token, {
                expires: new Date(Date.now() + 86400000), // must add secure at production time
                httpOnly: true
            })
            await Data.updateOne({ _id: id }, {
                $push: { tokens: uuid }
            })
            res.redirect('/')
        }
    } catch (error) {
        res.sendStatus(500)
    }
})

app.get('/logout', auth, async (req, res) => {
    res.clearCookie("jwt")
    try {
        const tmp = await Data.findOneAndUpdate({ _id: req.id }, {
            $pull: { tokens: req.rid }
        })
        res.redirect('/')
    } catch (error) {
        res.sendStatus(500)
    }
})

app.get('/register', async (req, res) => {
    if (req.cookies.jwt) res.redirect('/');
    else res.sendFile(__dirname + '/src/register.html')
})

app.post('/register', async (req, res) => {
    try {
        let tmp = await Data.findOne({ email: req.body.email })
        if (tmp) res.redirect('/login')
        else {
            req.body.password = await bcrypt.hash(req.body.password, 10)
            tmp = await Data.create(req.body)
            console.log(tmp);
            res.redirect('/')
        }
    } catch (error) {
        res.sendStatus(502)
    }
})

app.get('/forget', async (req, res) => {
    if (req.cookies.jwt) res.redirect('/');
    else res.sendFile(__dirname + '/src/email_verify.html')
})

app.post('/forget', async (req, res) => {
    try {
        const tmp = await Data.findOne({ email: req.body.email })
        if (!tmp) res.redirect('/register')
        else {
            const sender = {
                email: 'indimart@gmail.com',
                name: 'indiMart'
            }
            const receivers = [{ email: req.body.email }]
            const code = otp()
            const token = jwt.sign({
                otp: code,
                email: req.body.email
            }, process.env.SECRET_KEY)
            res.cookie('code', token, {
                expires: new Date(Date.now() + 300000),
                httpOnly: true
            })
            tranEmailApi.sendTransacEmail({
                sender,
                to: receivers,
                subject: 'Regarding email verification',
                htmlContent: `Dear Customer,
                
                Your OTP for email verification given below
                
                <h1>${code}</h1>
                
                Best regards,        
                <b>indiMart</b>`
            })
                .then(console.log)
                .catch(console.log)
            if (req.body.active) res.send({})
            else res.render('verify_mail_send.hbs', {
                email: req.body.email
            })
        }
    } catch (error) {
        res.sendStatus(502)
    }
})

app.post('/verify', async (req, res) => {
    try {
        const token = req.cookies.code
        const obj = jwt.verify(token, process.env.SECRET_KEY)
        if (req.body.otp == obj.otp) {
            res.send({
                code: true
            })
        }
        else res.send({
            code: false
        })
    } catch (error) {
        res.redirect('/login')
    }
})

app.get('/password', (req, res) => {
    try {
        const token = req.cookies.code
        const obj = jwt.verify(token, process.env.SECRET_KEY)
        res.sendFile(__dirname + '/src/change_password.html')
    } catch (error) {
        res.redirect('/login')
    }
})

app.patch('/password', async (req, res) => {
    try {
        const token = req.cookies.code
        const obj = jwt.verify(token, process.env.SECRET_KEY)
        req.body.password = await bcrypt.hash(req.body.password, 10)
        try {
            const tmp = await Data.findOneAndUpdate({ email: obj.email }, {
                $set: {
                    password: req.body.password
                }
            })
            console.log(tmp);
            res.send(tmp)
        } catch (error) {
            res.sendStatus(502)
        }
    } catch (error) {
        res.redirect('/login')
    }
})

app.get('/terms', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    res.render("terms.hbs", {
        iname: 'Hi, ' + user
    })
})

app.post('/review', auth, async (req, res) => {
    //console.log(req.body);
    const options = {
        method: 'POST',
        headers: {
            'content-type': 'application/json'
        },
        body: JSON.stringify({
            pid: req.body.pid,
            id: req.id,
            review: req.body.review,
            stars: Number(req.body.star)
        })
    };
    let tmp = await fetch('https://martdb.onrender.com/review', options)
    tmp = await tmp.json()
    //console.log(tmp);
    res.redirect(`/product?cat=${req.body.category}&id=${req.body.pid}`);
})

app.post('/contact', async (req, res) => {
    if (!validator.isEmail(req.body.email)) return res.status.sendFile(__dirname + '/src/error.html')
    let sender = {
        email: req.body.email,
        name: req.body.name
    }
    const receivers = [{ email: 'sundeep5521@gmail.com' }]
    tranEmailApi.sendTransacEmail({
        sender,
        to: receivers,
        subject: 'Feedback Request',
        htmlContent: `${req.body.text}`
    })
        .then(console.log)
        .catch(console.log)
    sender = {
        email: 'indimart@gmail.com',
        name: 'indiMart'
    }
    tranEmailApi.sendTransacEmail({
        sender,
        to: [{ email: req.body.email }],
        subject: 'Thank You for Your Valuable Feedback!',
        htmlContent: `<div class="markdown prose w-full break-words dark:prose-invert light"><p>Dear ${req.body.name},</p><p>Thank you for choosing Indimart as your preferred destination for online shopping. We greatly appreciate your recent feedback and would like to express our gratitude for taking the time to share your thoughts with us.</p><p>Your feedback is vital to our continuous efforts in improving our website and enhancing the overall shopping experience for our valued customers like yourself. We understand that providing a seamless and enjoyable online shopping experience is crucial, and your input allows us to identify areas where we can further optimize our services.</p><p>Rest assured that your feedback has been noted, and our team will thoroughly review and analyze it. We take every comment seriously and consider each suggestion as an opportunity for growth and improvement.</p><p>We truly value your contribution as it helps us shape the future of Indimart. If you have any further feedback or suggestions, please feel free to reach out to us. We are here to listen and ensure that your voice is heard.</p><p>Once again, thank you for your valuable feedback. We look forward to serving you better and providing you with an exceptional shopping experience at Indimart.</p><p>Best regards,<br>
            Sandeep<br>
            Indimart Customer Support Team</p></div>`
    }).then(console.log)
        .catch(console.log)
    res.redirect('/')
})

app.get('/privacy', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    res.render("privacy.hbs", {
        iname: 'Hi, ' + user
    })
})

app.get('/refund', auth, async (req, res) => {
    const id = req.id
    const tmp = await Data.findOne({ _id: id });
    let user = tmp.name.split(" ", 1);
    user = String(user).charAt(0).toUpperCase() + String(user).slice(1);
    res.render("refund.hbs", {
        iname: 'Hi, ' + user
    })
})

app.get('/db', async (req, res) => {
    try {
        const tmp = await Data.find()
        res.send(tmp)
    } catch (error) {
        res.sendStatus(500)
    }
})

app.get('*', (req, res) => {
    res.sendFile(__dirname + '/src/error.html')
})

const start = async () => {
    await con(process.env.MONGODB_URL);
    app.listen(PORT, () => {
        console.log('server runs');
    })
}
start();