const express = require('express');
const authMiddleware = require('../middleware/authMiddleware');

const router = express.Router();

// Open only to logged users
router.get('/profile', authMiddleware(), (req, res) => {
  res.json({
    message: 'Welcome to your profile!',
    user: req.user,
  });
});

// Open only to admins
router.get('/admin', authMiddleware('admin'), (req, res) => {
  res.json({
    message: 'Welcome, admin!',
    user: req.user,
  });
});

module.exports = router;