text: const express = require('express');
  const router = express.Router();
  const bcrypt = require('bcryptjs');
  const jwt = require('jsonwebtoken');
  const config = require('config');
  const auth = require('../middleware/auth');
  const { check, validationResult } = require('express-validator');
  
  const User = require('../models/User');
  
  // get the loggedin user
  router.get('/', auth,  async (req, res) => {
      try {
          const user = await User.findById(req.user.id).select('-password');
          res.json(user);
      } catch (err) {
          console.error(err.message);
          res.status(500).send('Server error');
      }
  }); 
  
  // auth user and get token 
  router.post('/', [
      check('email', 'Please include a valid email!!').isEmail(),
      check('password', 'Password is required').exists()
  ], async (req, res) => {
      const errors = validationResult(req);
      if(!errors.isEmpty()) {
          return res.status(400).json({ errors: errors.array() });
      }
  
      const { email, password } = req.body;
  
      try {
          let user = await User.findOne({email: email });
  
          if(!user) {
              return res.status(400).json({msg: 'Invalid Credentials!!'});
          }
  
          const isMatch = await bcrypt.compare(password, user.password);
  
          if(!isMatch) {
              return res.status(400).json({ msg: 'Invalid Credentials!!'});
          }
  
          const payload = {
              user : {
                  id: user.id
              }
          }
  
          jwt.sign(payload, config.get('jwtSecret'), {
              expiresIn: 3600 
          }, (err, token) => {
              if(err) throw err;
              res.json({ token });
          });
  
      } catch (err) {
          console.error(error.message);
          res.status(500).send('Server Error');
      }
  }); 
  
  module.exports = router;