const express = require('express');
const router  = express.Router();
const db     = require('./db');

// GET all students
router.get('/', async (req, res) => {
  const [rows] = await db.query(
    'SELECT * FROM students');
  res.json(rows);
});

// POST create student (with validation)
router.post('/', async (req, res) => {
  const {name, course, year, gpa} = req.body;
  if (!name || !course || !year)
    return res.status(400)
      .json({error:'Missing fields'});
  const [r] = await db.query(
    'INSERT INTO students SET ?',
    [{name,course,year,gpa}]);
  res.status(201).json(
    {id:r.insertId,...req.body});
});

// No request yet