Read Code Like a Hacker

1const express = require('express');
2const router = express.Router();
3const db = require('../config/database');
4const paymentService = require('../services/paymentService');
5
6router.post('/book', async (req, res) => {
7  try {
8    const { movieId, seats, payment } = req.body;
9    const userId = req.user.id;
10    
11    const booking = await db.query(
12      'INSERT INTO bookings (movie_id, seats, user_id, status) VALUES ($1, $2, $3, $4) RETURNING *',
13      [movieId, seats, userId, 'pending']
14    );
15    
16    await paymentService.processPayment(payment, booking.rows[0].id);
17    res.json({ success: true, bookingId: booking.rows[0].id });
18  } catch (err) {
19    res.status(500).json({ success: false, error: err.message, stack: err.stack, details: err });
20  }
21});
22
23router.get('/my-bookings', async (req, res) => {
24  const userId = req.user.id;
25  const result = await db.query('SELECT * FROM bookings WHERE user_id = $1', [userId]);
26  res.json(result.rows);
27});
28
29module.exports = router;