middleware.js

const ExpressError = require('./utils/ExpressError');
const adventurePlace = require('./models/adventureplace');
const {adventureplaceSchema, reviewSchema} = require('./schemas.js');
const Review = require('./models/review');
module.exports.isLoggedIn = (req,res,next) => {
    if(!req.isAuthenticated()){
        req.session.returnTo = req.originalUrl;
        req.flash('error','you must be signed in first!');
        return res.redirect('/login');
    }
    next();
}
module.exports.storeReturnTo = (req, res, next) => {
    if (req.session.returnTo) {
        res.locals.returnTo = req.session.returnTo;
    }
    next();
}
module.exports.validateAdventureplace = (req, res, next) => {
    const { error } = adventureplaceSchema.validate(req.body);
    if (error) {
        const msg = error.details.map(el => el.message).join(',')
        throw new ExpressError(msg, 400)
    } else {
        next();
    }
}
module.exports.isAuthor = async(req,res,next) => {
  const { id }= req.params;
  const adventureplace = await adventurePlace.findById(id);
  if(!adventureplace.author.equals(req.user._id)){
   req.flash('error','You are not allowed to do that');
   return res.redirect(`/adventureplaces/${id}`);
  }
  next();
}
module.exports.isReviewAuthor = async(req,res,next) => {
  const { id, reviewId }= req.params;
  const review = await Review.findById(reviewId);
  if(!review.author.equals(req.user._id)){
   req.flash('error','You are not allowed to do that');
   return res.redirect(`/adventureplaces/${id}`);
  }
  next();
}

module.exports.validateReview = (req,res,next) => {
    const {error} = reviewSchema.validate(req.body);
    if(error) { 
        const msg= error.details.map(el => el.message).join(',')
        throw new ExpressError(msg, 400)
      }
      else{
        next();
      }
}