<?php

use App\Http\Controllers\Api\MeController;
use App\Http\Controllers\Api\QrCodeController;
use App\Http\Controllers\Api\SslCallbackController;
use Illuminate\Support\Facades\Route;

// Signed SSL completion callback from Ladill Domains (HMAC-verified, no session).
Route::post('/ssl-callback', SslCallbackController::class)->name('api.ssl-callback');

Route::middleware(['auth:sanctum', \App\Http\Middleware\SetActingAccount::class])->prefix('v1')->group(function () {
    Route::get('/me', MeController::class);

    Route::get('/qr-codes', [QrCodeController::class, 'index']);
    Route::post('/qr-codes', [QrCodeController::class, 'store']);
    Route::get('/qr-codes/{qrCode}', [QrCodeController::class, 'show'])->whereNumber('qrCode');
    Route::patch('/qr-codes/{qrCode}', [QrCodeController::class, 'update'])->whereNumber('qrCode');
    Route::get('/qr-codes/{qrCode}/analytics', [QrCodeController::class, 'analytics'])->whereNumber('qrCode');
});