const express = require('express');
const { getDB } = require('../database');

const router = express.Router();
const bcrypt = require('bcryptjs');

router.put('/password', async (req, res) => {
  try {
    console.log(123, req.body);
    const { id, oldPassword, newPassword } = req.body;

    // 1. 先查询用户信息
    const [users] = await getDB().execute('SELECT * FROM users WHERE id = ?', [parseInt(id)]);
    if (users.length === 0) {
      return res.status(404).json({ success: false, message: '用户不存在' });
    }

    const user = users[0];
    console.log('数据库中的密码:', user.password);

    // 2. 验证旧密码（使用 bcrypt 比较）
    const isOldPasswordValid = await bcrypt.compare(oldPassword, user.password);
    if (!isOldPasswordValid) {
      return res.status(400).json({ success: false, message: '旧密码错误' });
    }

    // 3. 加密新密码
    const hashedNewPassword = await bcrypt.hash(newPassword, 10);

    // 4. 更新密码
    const query = `
      UPDATE users
      SET password = ?
      WHERE id = ?
    `;
    const [result] = await getDB().execute(query, [hashedNewPassword, parseInt(id)]);

    if (result.affectedRows === 0) {
      return res.status(500).json({ success: false, message: '密码更新失败' });
    }
    
    res.json({ success: true, message: '密码更新成功' });
  } catch (error) {
    console.error('更新密码失败:', error);
    res.status(500).json({ success: false, message: '更新密码失败' });
  }
});

router.put('/:id', async (req, res) => {
  try {
    const { id } = req.params;
    const { alipayQr, avatar, bankCard, idCard, phone, realName, unionpayQr, username, wechatQr } = req.body;
    const query = `
      UPDATE users
      SET alipay_qr = ?, avatar = ?, bank_card = ?, id_card = ?, phone = ?, real_name = ?, unionpay_qr = ?, username = ?, wechat_qr = ?
      WHERE id = ?
    `;
    const [user] = await getDB().execute(query, [alipayQr, avatar, bankCard, idCard, phone, realName, unionpayQr, username, wechatQr, parseInt(id)]);
    if (user.length === 0) {
      return res.status(404).json({ success: false, message: '用户不存在' });
    }
    res.json({ success: true, data: user[0] });
  } catch (error) {
    console.error('更新用户信息失败:', error);
    res.status(500).json({ success: false, message: '更新用户信息失败' });
  }
})

module.exports = router;