33 lines
1.3 KiB
PHP
33 lines
1.3 KiB
PHP
<?php
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| API Routes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| API routes are versioned using grazulex/laravel-apiroute v2.x.
|
|
| Versions are defined in config/apiroute.php and route files are
|
|
| located in routes/api/{version}.php
|
|
|
|
|
| Supports URI path, header, query, and Accept header detection.
|
|
| See config/apiroute.php for configuration options.
|
|
|
|
|
*/
|
|
|
|
// Version 1 - Current stable version
|
|
ApiRoute::version('v1', function () {
|
|
// Public routes with auth rate limiter (5/min - brute force protection)
|
|
Route::middleware('throttle:auth')->group(function () {
|
|
Route::post('register', [AuthController::class, 'register'])->name('api.v1.register');
|
|
Route::post('login', [AuthController::class, 'login'])->name('api.v1.login');
|
|
});
|
|
|
|
// Protected routes with authenticated rate limiter (120/min)
|
|
Route::middleware(['auth:sanctum', 'throttle:authenticated'])->group(function () {
|
|
Route::post('logout', [AuthController::class, 'logout'])->name('api.v1.logout');
|
|
Route::get('me', [AuthController::class, 'me'])->name('api.v1.me');
|
|
});
|
|
})
|
|
->current()
|
|
->rateLimit(60); // Global rate limit: 60 requests/minute for v1
|