const express = require('express');
const authController = require('../controllers/authController');
const { requireAuth } = require('../middleware/auth');

const router = express.Router();

// POST /api/auth/login
router.post('/login', authController.login);

// POST /api/auth/logout
router.post('/logout', authController.logout);

// GET /api/auth/session
router.get('/session', authController.checkSession);

// POST /api/auth/change-password (requires authentication)
router.post('/change-password', requireAuth, authController.changePassword);

module.exports = router;