27 lines
623 B
JavaScript
27 lines
623 B
JavaScript
const express = require('express');
|
|
const {
|
|
createOrder,
|
|
getUserOrders,
|
|
getOrder,
|
|
updateOrderStatus,
|
|
cancelOrder,
|
|
getAllOrders
|
|
} = require('../controllers/orderController');
|
|
const { protect } = require('../middleware/authMiddleware');
|
|
|
|
const router = express.Router();
|
|
|
|
// All routes require authentication
|
|
router.use(protect);
|
|
|
|
// User order routes
|
|
router.post('/', createOrder);
|
|
router.get('/', getUserOrders);
|
|
router.get('/:id', getOrder);
|
|
router.put('/:id/cancel', cancelOrder);
|
|
|
|
// Admin routes
|
|
router.get('/admin/all', getAllOrders);
|
|
router.put('/:id/status', updateOrderStatus);
|
|
|
|
module.exports = router; |