app.js

if (process.env.NODE_ENV !== "production") {
  require('dotenv').config();
}

require('./config/passport'); // Loads local and Google strategies

const express = require('express');
const app = express();
const ejsMate = require('ejs-mate');
const mongoose = require('mongoose');
const path = require("path");
const methodOverride = require("method-override");
const ExpressError = require("./utils/ExpressError.js");
const session = require("express-session");
const MongoStore = require('connect-mongo');
const flash = require("connect-flash");
const passport = require("passport");
const LocalStrategy = require("passport-local").Strategy;
const User = require("./models/user.js");
const cartRoutes   = require("./routes/cart.js"); 
const cors = require('cors'); // <-- Import CORS

// Allow all origins (for full third-party access)
app.use(cors());

// Routes
const bookingRoutes = require("./routes/booking.js");
const listingRouter = require("./routes/listing.js");
const reviewRouter = require("./routes/review.js");
const userRouter = require("./routes/user.js");
const authRoutes = require("./routes/authRoutes.js");

const dbUrl = process.env.ATLASDB_URL;

// View engine setup
app.set("view engine", "ejs");
app.set("views", path.join(__dirname, "views"));
app.engine('ejs', ejsMate);

// Middleware
app.use(express.urlencoded({ extended: true }));
app.use(methodOverride("_method"));
app.use(express.static(path.join(__dirname, "public")));

// Session store setup
const store = MongoStore.create({
  mongoUrl: dbUrl,
  crypto: {
    secret: process.env.SECRET,
  },
  touchAfter: 24 * 3600,
});
store.on("error", (err) => {
  console.log("ERROR in MONGO SESSION STORE", err);
});

const sessionOptions = {
  store,
  secret: process.env.SECRET,
  resave: false,
  saveUninitialized: true,
  cookie: {
    expires: Date.now() + 7 * 24 * 60 * 60 * 1000,
    maxAge: 7 * 24 * 60 * 60 * 1000,
    httpOnly: true,
  },
};

app.use(session(sessionOptions));
app.use(flash());

// Passport setup
app.use(passport.initialize());
app.use(passport.session());
passport.use(new LocalStrategy(User.authenticate()));
passport.serializeUser(User.serializeUser());
passport.deserializeUser(User.deserializeUser());

// Global flash & user middleware
app.use((req, res, next) => {
  res.locals.success = req.flash("success");
  res.locals.error = req.flash("error");
  res.locals.currUser = req.user;
  res.locals.cartCount = (req.session.cart || []).length;
  next();
});

// Connect to DB and then mount routes
async function main() {
  await mongoose.connect(dbUrl);
}
main()
  .then(() => {
    console.log("✅ MongoDB connected");

    // Mount routes after DB is ready
    app.use("/book", bookingRoutes);
    app.use("/listings", listingRouter);
    app.use("/listings/:id/reviews", reviewRouter);
    app.use("/", userRouter);
    app.use("/", authRoutes);
    app.use("/cart", cartRoutes); 

    // 404 handler
    app.all("*", (req, res, next) => {
      next(new ExpressError(404, "Page not Found!"));
    });

    // General error handler
    app.use((err, req, res, next) => {
      let { statusCode = 500, message = "Something went wrong" } = err;
      res.status(statusCode).render("error.ejs", { message });
    });

    // Start server
    app.listen(8080, () => {
      console.log("✅ Server is running on port 8080");
    });
  })
  .catch(err => {
    console.error("❌ MongoDB connection error:", err);
  });