index.js

require('dotenv').config();
const express = require("express");
const mysql = require("mysql2");
const cors = require("cors");

const app = express();
app.use(cors({ origin: "*" }));
app.use(express.json());

// ===== DEBUG =====
console.log("PORT:", process.env.PORT);
console.log("DATABASE_URL:", process.env.DATABASE_URL);

// MySQL connection using Railway DATABASE_URL
const dbUrl = new URL(process.env.DATABASE_URL);
const db = mysql.createConnection({
  host: dbUrl.hostname,
  user: dbUrl.username,
  password: dbUrl.password,
  database: dbUrl.pathname.slice(1),
  port: Number(dbUrl.port) // ensure it's a number
});

db.connect(err => {
  if (err) {
    console.error("MySQL connection error:", err);
    process.exit(1);
  }
  console.log("MySQL Connected!");
});

// ===== SIGN UP =====
app.post("/signup", (req, res) => {
  const { name, email, password, role, phone, location } = req.body;
  if (!name || !email || !password || !role)
    return res.status(400).json({ message: "Missing required fields" });

  db.query("SELECT * FROM users WHERE email = ?", [email], (err, result) => {
    if (err) return res.status(500).json({ message: "Database error", error: err });
    if (result.length > 0) return res.status(400).json({ message: "Email already exists" });

    db.query(
      "INSERT INTO users (name, email, password, role, phone, location) VALUES (?, ?, ?, ?, ?, ?)",
      [name, email, password, role, phone || "", location || ""],
      (err2, result2) => {
        if (err2) return res.status(500).json({ message: "Database error", error: err2 });
        res.status(200).json({ message: "Sign-Up successful!" });
      }
    );
  });
});

// ===== LOGIN =====
app.post("/login", (req, res) => {
  const { email, password } = req.body;
  if (!email || !password)
    return res.status(400).json({ message: "Email and password required" });

  db.query("SELECT * FROM users WHERE email = ?", [email], (err, result) => {
    if (err) return res.status(500).json({ message: "Database error", error: err });
    if (result.length === 0) return res.status(400).json({ message: "Email not found" });

    const user = result[0];
    if (user.password !== password)
      return res.status(400).json({ message: "Incorrect password" });

    res.status(200).json({
      message: "Login successful",
      user: {
        id: user.id,
        name: user.name,
        email: user.email,
        role: user.role,
        phone: user.phone,
        location: user.location,
        created_at: user.created_at,
      },
    });
  });
});

// Start server on Railway PORT
const PORT = process.env.PORT || 3000;
app.listen(PORT, () => console.log(`Server running on port ${PORT}`));
app.get("/health", (req, res) => {
  res.json({ status: "ok", message: "Backend is live!" });
});