import { Router } from 'express';
import { sendOtp, verifyOtp, getMe, updateMe, peekDevOtp } from '../controllers/auth.controller';
import { requireAuth } from '../middleware/auth';

const router = Router();

router.post('/send-otp', sendOtp);
router.post('/verify-otp', verifyOtp);
// Dev-only — gated server-side by EXPOSE_OTP_IN_RESPONSE.
router.get('/dev-peek-otp', peekDevOtp);
router.get('/me', requireAuth, getMe);
router.patch('/me', requireAuth, updateMe);

export default router;