const db = require('../db');

const getChildByTokenStmt = db.prepare('SELECT * FROM children WHERE kiosk_token = ?');

function resolveKiosk(req, res, next) {
  if (typeof req.params.token !== 'string' || !req.params.token) {
    return res.status(404).json({ error: 'Invalid kiosk link' });
  }
  const child = getChildByTokenStmt.get(req.params.token);
  if (!child) return res.status(404).json({ error: 'Invalid kiosk link' });
  req.child = child;
  next();
}

module.exports = resolveKiosk;