module.exports = {
    "setup": function(router,con,server) {

        const PIDS = {} //[pid]: true/"already_used"

        router.get("/api/pid", async function(req,res) {
            res.set("Access-Control-Allow-Origin","*")
            let pid = server.genstring(10) //collision chance is low enough, but we'll check anyways
            while (PIDS[pid] != undefined){
                pid = server.genstring(10)
                console.log(5,"pid collision");
            }
            PIDS[pid] = true
            setTimeout(function() {
                PIDS[pid]=undefined
            },40000)
            res.json({"pid":pid})
        })

        router.post("/api/post", async function(req,res) {
            if(!req.body.message) {
                res.json({"error":"no message to post"})
                return
            }
            if((typeof req.body.message) != "string") {
                res.json({"error":"no message to post"})
                return
            }
            if((typeof req.body.pid) != "string") {
                res.json({"error":"no pid given"})
                return
            }
            if(req.body.pid.length != 10 || PIDS[req.body.pid] !== true) {
                res.json({"error":"invalid pid given"})
                return
            }
            PIDS[req.body.pid] = "already_used"

            let reply_id
            if(!req.body.reply_id || req.body.reply_id < 0) {
                reply_id = 0
            } else {
                reply_id = req.body.reply_id
            }

            if((typeof req.body.reply_id) != "number") {
                res.json({"error":"no valid reply id given"})
                return
            }

            if(req.body.message.length > 1000) {
                res.json({"error":"message too long"})
                return
            }

            req.body.message = encodeURIComponent(req.body.message.trim())

            if(req.body.message.length > 1000) {
                res.json({"error":"message too long"}) //check again after URI encoding it
                return
            }

            req.body.receiver = encodeURIComponent(req.body.receiver||"")
            if(req.body.receiver == "")req.body.receiver="everyone"

            if(!req.body.message) {
                res.json({"error":"no message to post"})
                return
            }

            let sql = `insert into ipost.posts (post_user_name,post_text,post_time,post_receiver_name,post_from_bot,post_reply_id) values (?,?,?,?,?,?);`
            let values = [encodeURIComponent(res.locals.username),req.body.message,Date.now(),req.body.receiver,res.locals.isbot,reply_id]
            con.query(sql, values, function (err, result) {
                if (err) throw err;
                let post_obj = {
                    post_user_name: encodeURIComponent(res.locals.username),
                    post_text: req.body.message,
                    post_time: Date.now(),
                    post_special_text: "",
                    post_receiver_name: req.body.receiver,
                    post_from_bot: res.locals.isbot,
                    post_reply_id: reply_id
                }

                let message = {
                    message: "new_post",
                    data: post_obj
                }
                let messagestr = JSON.stringify(message)
                server.wss.clients.forEach(function(ws) {
                    if(ws.channel == decodeURIComponent(req.body.receiver)) {
                        ws.send(messagestr)
                    }
                });
                res.json({"success":"successfully posted message"})
                console.log(5,`posted new message by ${res.locals.username} : ${req.body.message}`);
            });
        })
    }
}