import bcrypt from 'bcrypt';
import { pool } from '~/server/db';

export default defineEventHandler(async (event) => {
    const { username, password } = await readBody(event);

    // Validate input
    if (!username || !password) {
        throw createError({
            statusCode: 400,
            message: 'Username and password are required',
        });
    }

    try {
        // Check if the username already exists
        const [rows] = await pool.query('SELECT username FROM users WHERE username = ?', [username]);
        if (rows.length > 0) {
            throw createError({
                statusCode: 400,
                message: 'Username is already taken',
            });
        }

        // Hash the password
        const hashedPassword = await bcrypt.hash(password, 10);

        // Insert the new user into the database
        await pool.query('INSERT INTO users (username, password) VALUES (?, ?)', [username, hashedPassword]);

        return { message: 'User registered successfully!' };
    } catch (err) {
        throw createError({
            statusCode: 500,
            message: 'Database error: ' + err.message,
        });
    }
});