import { Router } from 'express';
import { verifyToken } from '../auth/verify-token.middleware';
import { verifyServiceToken } from '../auth/verify-service-token.middleware';
import { requireOrgId } from '../auth/require-org-id.middleware';
import {
  deleteEvento,
  getEvento,
  getEventiVista,
  postEvento,
  postRisorsaCollegata,
  putEvento,
} from '../controllers/eventi.controller';

export const eventiRouter = Router();

eventiRouter.post('/eventi', verifyToken, requireOrgId, postEvento);
// Viste "anno"/"mese": sola lettura, trasversali a tutte le branche dell'org.
eventiRouter.get('/eventi', verifyToken, requireOrgId, getEventiVista);
eventiRouter.get('/eventi/:id', verifyToken, requireOrgId, getEvento);
eventiRouter.put('/eventi/:id', verifyToken, requireOrgId, putEvento);
eventiRouter.delete('/eventi/:id', verifyToken, requireOrgId, deleteEvento);
// Machine-to-machine: verifyServiceToken invece di verifyToken/requireOrgId.
eventiRouter.post('/eventi/:id/risorse', verifyServiceToken, postRisorsaCollegata);