const express = require('express');
const UserController = require('../controllers/users.controller');
const verifyToken = require('../middleware/verifyToken');
const verifyAccess = require('../middleware/verifyAccess');

const router = express.Router();

// Get all users
router.get('/', verifyToken.verifyAccessToken, UserController.getAllUsers);

// Get user by ID
router.get('/:id', verifyToken.verifyAccessToken, UserController.getUserById);

// Create new user
router.post('/', verifyToken.verifyAccessToken, verifyAccess(), UserController.createUser);

// Update user
router.put('/:id', verifyToken.verifyAccessToken, verifyAccess(), UserController.updateUser);

// Delete user
router.delete('/:id', verifyToken.verifyAccessToken, verifyAccess(), UserController.deleteUser);

// Change user password
router.put('/change-password/:id', verifyToken.verifyAccessToken, verifyAccess(), UserController.changePassword);

// Approve user
router.put('/:id/approve', verifyToken.verifyAccessToken, verifyAccess(), UserController.approveUser);


module.exports = router;