api/routes/api.php

<?php

use App\Http\Controllers\AuthController;
use App\Http\Controllers\DeviceTokenController;
use App\Http\Controllers\MealImageAnalysisController;
use App\Http\Controllers\MealPostController;
use App\Http\Controllers\PostReviewsController;
use App\Http\Controllers\PublicUserProfileController;
use App\Http\Controllers\ReportController;
use App\Http\Controllers\StravaController;
use App\Http\Controllers\WorkoutSessionController;
use Illuminate\Support\Facades\Route;

// Auth
Route::prefix('auth')->group(function (): void {
    Route::post('register', [AuthController::class, 'register']);
    Route::post('login', [AuthController::class, 'login']);
    Route::post('mobile/register', [AuthController::class, 'mobileRegister']);
    Route::post('mobile/login', [AuthController::class, 'mobileLogin']);
    Route::post('forgot-password', [AuthController::class, 'forgotPassword'])
        ->middleware('throttle:6,1')
        ->name('password.email');
    Route::post('reset-password', [AuthController::class, 'resetPassword'])
        ->middleware('throttle:6,1')
        ->name('password.update');
    Route::get('email/verify/{id}/{hash}', [AuthController::class, 'verifyEmail'])
        ->middleware(['signed:relative', 'throttle:6,1'])
        ->name('verification.verify');
    Route::post('email/verification-notification', [AuthController::class, 'sendVerificationEmail'])
        ->middleware('throttle:6,1')
        ->name('verification.send');

    Route::middleware('auth:sanctum')->group(function (): void {
        Route::post('logout', [AuthController::class, 'logout']);
        Route::get('me', [AuthController::class, 'me']);
        Route::patch('me', [AuthController::class, 'update'])->middleware('verified');
        Route::delete('me', [AuthController::class, 'destroy']);
    });

});

// Health
Route::get('/health', function () {
    return response()->json(['status' => 'ok']);
});
Route::middleware(['auth:sanctum', 'verified', 'not_suspended'])->group(function (): void {
    Route::post('device-tokens', [DeviceTokenController::class, 'store']);
    Route::delete('device-tokens', [DeviceTokenController::class, 'destroy']);
    Route::get('test-notifs', [DeviceTokenController::class, 'notifs']);
});

// Workouts
Route::middleware(['auth:sanctum', 'verified', 'not_suspended'])->group(function (): void {
    Route::get('workouts/calendar', [WorkoutSessionController::class, 'calendar'])->name('workouts.calendar');
    Route::get('workouts', [WorkoutSessionController::class, 'index'])->name('workouts.index');
    Route::post('workouts', [WorkoutSessionController::class, 'store'])->name('workouts.store');
    Route::get('strava/status', [StravaController::class, 'status'])->name('strava.status');
    Route::get('strava/authorization-url', [StravaController::class, 'authorizationUrl'])->name('strava.authorization-url');
    Route::post('strava/callback', [StravaController::class, 'callback'])->name('strava.callback');
    Route::delete('strava/connection', [StravaController::class, 'disconnect'])->name('strava.disconnect');
    Route::post('strava/sync', [StravaController::class, 'sync'])->name('strava.sync');
});

// Meals
Route::middleware(['auth:sanctum', 'verified', 'not_suspended'])->group(function (): void {
    Route::get('users/{user}', [PublicUserProfileController::class, 'show'])->name('users.show');
    Route::post('users/{user}/reports', [ReportController::class, 'storeUser'])
        ->middleware('throttle:10,1')
        ->name('users.reports.store');
    Route::get('me/meal-posts', [MealPostController::class, 'mine'])->name('meal-posts.mine');
    Route::get('meal-posts/stats', [MealPostController::class, 'stats']);
    Route::get('meal-posts/calendar', [MealPostController::class, 'calendar']);
    Route::post('meal-posts/analyze-image', [MealImageAnalysisController::class, 'store']);
    Route::post('meal-posts/{mealPost}/like', [MealPostController::class, 'like'])->name('meal-posts.like');
    Route::delete('meal-posts/{mealPost}/like', [MealPostController::class, 'unlike'])->name('meal-posts.unlike');
    Route::post('meal-posts/{mealPost}/reports', [ReportController::class, 'storeMealPost'])
        ->middleware('throttle:10,1')
        ->name('meal-posts.reports.store');
    Route::get('meal-posts/{mealPost}/reviews', [PostReviewsController::class, 'index'])->name('meal-posts.reviews.index');
    Route::post('meal-posts/{mealPost}/reviews', [PostReviewsController::class, 'store'])->name('meal-posts.reviews.store');
    Route::get('post-reviews/{postReview}', [PostReviewsController::class, 'show'])->name('post-reviews.show');
    Route::put('post-reviews/{postReview}', [PostReviewsController::class, 'update'])->name('post-reviews.update');
    Route::patch('post-reviews/{postReview}', [PostReviewsController::class, 'update'])->name('post-reviews.patch');
    Route::delete('post-reviews/{postReview}', [PostReviewsController::class, 'destroy'])->name('post-reviews.destroy');
    Route::apiResource('meal-posts', MealPostController::class)->except(['update']);
    Route::put('meal-posts/{mealPost}', [MealPostController::class, 'update'])->name('meal-posts.update');
    Route::patch('meal-posts/{mealPost}', [MealPostController::class, 'update'])->name('meal-posts.patch');
});