// /components/professors/professorRoutes.js
'use strict';

const express = require('express');
const professorController = require('./professorController');
const { validateCreateProfessor, validateUpdateProfessor } = require('./professorValidator');
const authMiddleware = require('../../middlewares/authMiddleware');
const perm = require('../../middlewares/permissionMiddleware');
const { PERMISSIONS } = require('../../constants/permissions');

const router = express.Router();

router.use(authMiddleware);

// Professor Self-Service Portal (accessible by authenticated professors)
router.get('/portal', professorController.getPortal);
router.get('/portal/me', professorController.getPortal);
router.get('/my-portal', professorController.getPortal);

// Admin routes
router.post('/admin/create', perm.requires(PERMISSIONS.PROFESSORS_CREATE), validateCreateProfessor, professorController.create);
router.post('/admin/create-from-user', perm.requires(PERMISSIONS.PROFESSORS_CREATE), professorController.createFromUser);
router.get('/admin/get-all', perm.requires(PERMISSIONS.PROFESSORS_READ), professorController.getAll);
router.get('/admin/search', perm.requires(PERMISSIONS.PROFESSORS_SEARCH), professorController.search);
router.get('/admin/get-one/:id', perm.requires(PERMISSIONS.PROFESSORS_READ), professorController.getOne);
router.put('/admin/update/:id', perm.requires(PERMISSIONS.PROFESSORS_UPDATE), validateUpdateProfessor, professorController.update);
router.delete('/admin/delete/:id', perm.requires(PERMISSIONS.PROFESSORS_DELETE), professorController.delete);

module.exports = router;