20 lines
810 B
JavaScript
20 lines
810 B
JavaScript
const router = require("express").Router();
|
|
const controller = require("../controllers/lists.controller");
|
|
const auth = require("../middleware/auth");
|
|
const requireRole = require("../middleware/rbac");
|
|
const { ROLES } = require("../models/user.model");
|
|
const User = require("../models/user.model");
|
|
|
|
|
|
|
|
router.get("/", auth, requireRole(...Object.values(ROLES)), controller.getList);
|
|
router.get("/item-by-name", auth, requireRole(...Object.values(ROLES)), controller.getItemByName);
|
|
router.get("/suggest", auth, requireRole(...Object.values(ROLES)), controller.getSuggestions);
|
|
|
|
|
|
router.post("/add", auth, requireRole(ROLES.EDITOR, ROLES.ADMIN), controller.addItem);
|
|
router.post("/mark-bought", auth, requireRole(ROLES.EDITOR, ROLES.ADMIN), controller.markBought);
|
|
|
|
|
|
module.exports = router;
|