Auth

var mysql = require('../lib/db');

var pub = {
  authorize:function(uid,origin, cb){
    mysql.getConnection(function(err, connection) {
      if (err){ return cb(err); }

      // Use the connection
      connection.query('SELECT secret_key,domain_name FROM rs_eshop_auth WHERE secret_key = ?',uid, function(err, rows) {
        if (err){ return cb(err); }

        // And done with the connection.
        connection.release();
        // Don't use the connection here, it has been returned to the pool.
        if (rows[0].domain_name==origin) {
          cb(null, true);
        }else{
          cb(null, false);
        }
      });
    });
  }
};

module.exports = pub;