cod-api/db/user.db.js

const pool = require("../config");

// Get all users s
const getAllUsersDb = async () => {
  const queryText = `
    SELECT 
      u.user_id,
      u.user_fullname,
      u.user_name,
      u.user_email,
      u.user_phone,
      u.is_active,
      u.is_sa,
      u.is_approve,
      u.approved_by,
      approver.user_fullname AS approved_by_name,
      u.approved_at,
      u.created_at,
      u.updated_at,
      u.deleted_at,
      u.updated_by,
      u.deleted_by,
      r.role_id,
      r.role_name,
      r.role_description,
      r.role_level
    FROM m_users u
    LEFT JOIN m_roles r ON u.role_id = r.role_id
    LEFT JOIN m_users approver ON u.approved_by = approver.user_id
    WHERE u.deleted_at IS NULL
    ORDER BY u.user_id ASC
  `;
  const result = await pool.query(queryText);
  return result.recordset;
};

// Get user by ID 
const getUserByIdDb = async (id) => {
  const queryText = `
    SELECT 
      u.user_id,
      u.user_fullname,
      u.user_name,
      u.user_email,
      u.user_phone,
      u.is_active,
      u.is_sa,
      u.is_approve,
      u.approved_by,
      approver.user_fullname AS approved_by_name,
      u.approved_at,
      u.created_at,
      u.updated_at,
      u.deleted_at,
      u.updated_by,
      u.deleted_by,
      r.role_id,
      r.role_name,
      r.role_description,
      r.role_level
    FROM m_users u
    LEFT JOIN m_roles r ON u.role_id = r.role_id
    LEFT JOIN m_users approver ON u.approved_by = approver.user_id
    WHERE u.user_id = $1 AND u.deleted_at IS NULL
  `;
  const result = await pool.query(queryText, [id]);
  return result.recordset[0];
};

// Get user by email 
const getUserByUserEmailDb = async (email) => {
  const queryText = `
    SELECT 
      u.user_id,
      u.user_fullname,
      u.user_name,
      u.user_email,
      u.user_phone,
      u.user_password,
      u.is_active,
      u.is_sa,
      u.is_approve,
      u.role_id,
      r.role_name,
      r.role_description,
      r.role_level
    FROM m_users u
    LEFT JOIN m_roles r ON u.role_id = r.role_id
    WHERE u.user_email = $1 AND u.deleted_at IS NULL
  `;
  const result = await pool.query(queryText, [email]);
  return result.recordset[0];
};

// Get user by username 
const getUserByUsernameDb = async (username) => {
  const queryText = `
    SELECT 
      u.user_id,
      u.user_fullname,
      u.user_name,
      u.user_email,
      u.user_phone,
      u.user_password,
      u.is_active,
      u.is_sa,
      u.is_approve,
      u.role_id,
      r.role_name,
      r.role_description,
      r.role_level
    FROM m_users u
    LEFT JOIN m_roles r ON u.role_id = r.role_id
    WHERE u.user_name = $1 AND u.deleted_at IS NULL
  `;
  const result = await pool.query(queryText, [username]);
  return result.recordset[0];
};

// Create user
const createUserDb = async (data) => {
  const { query: queryText, values } = pool.buildDynamicInsert("m_users", data);
  const result = await pool.query(queryText, values);
  return result.recordset[0]?.inserted_id || null;
};

// Update user
const updateUserDb = async (userId, data) => {
  const { query: queryText, values } = pool.buildDynamicUpdate("m_users", data, { user_id: userId });
  await pool.query(queryText, values);
  return true;
};

// Approve user
const approveUserDb = async (userId, approverId) => {
  const queryText = `
    UPDATE m_users
    SET is_approve = 1,
        approved_by = $1,
        approved_at = GETDATE(),
        updated_at = GETDATE()
    WHERE user_id = $2 AND deleted_at IS NULL
  `;
  await pool.query(queryText, [approverId, userId]);
  return true;
};

// Change password
const changeUserPasswordDb = async (userId, newPassword) => {
  const queryText = `
    UPDATE m_users
    SET user_password = $1,
        updated_at = GETDATE()
    WHERE user_id = $2 AND deleted_at IS NULL
  `;
  await pool.query(queryText, [newPassword, userId]);
  return true;
};

// Soft delete user
const deleteUserDb = async (userId, deletedBy) => {
  const queryText = `
    UPDATE m_users
    SET deleted_at = GETDATE(),
        deleted_by = $1
    WHERE user_id = $2
  `;
  await pool.query(queryText, [deletedBy, userId]);
  return true;
};

module.exports = {
  getAllUsersDb,
  getUserByIdDb,
  getUserByUserEmailDb,
  getUserByUsernameDb,
  createUserDb,
  updateUserDb,
  approveUserDb,
  changeUserPasswordDb,
  deleteUserDb,
};