// Copyright 2026 Arctel.net
// SPDX-License-Identifier: Apache-2.0

package httpapi

import (
	"Wavelet/core"
	"Wavelet/core/contracts"
	"Wavelet/openflare/plugins/server/domain/waf"
	"Wavelet/openflare/plugins/server/kernel/apiutil"
)

func registerWAFRoutes(apiGroup core.RouterExtension, auth contracts.AuthService) {
	wafRoute := apiGroup.Group("/waf")
	wafRoute.Use(apiutil.AdminMiddlewares(auth)...)
	{
		wafRoute.GET("/ip-groups", waf.ListIPGroupsHandler)
		wafRoute.GET("/ip-groups/:id", waf.GetIPGroupHandler)
		wafRoute.POST("/ip-groups", waf.CreateIPGroupHandler)
		wafRoute.POST("/ip-groups/test", waf.TestIPGroupAutoConfigHandler)
		wafRoute.POST("/ip-groups/:id/update", waf.UpdateIPGroupHandler)
		wafRoute.POST("/ip-groups/:id/delete", waf.DeleteIPGroupHandler)
		wafRoute.POST("/ip-groups/:id/sync", waf.SyncIPGroupHandler)

		wafRoute.GET("/rule-groups", waf.ListRulesHandler)
		wafRoute.GET("/rule-groups/:id", waf.GetRuleHandler)
		wafRoute.POST("/rule-groups", waf.CreateRuleHandler)
		wafRoute.POST("/rule-groups/:id/meta", waf.UpdateRuleMetaHandler)
		wafRoute.POST("/rule-groups/:id/graph", waf.SaveRuleGraphHandler)
		wafRoute.POST("/rule-groups/:id/delete", waf.DeleteRuleHandler)

		wafRoute.GET("/sites/:route_id/rule-groups", waf.GetSiteRuleGroupsHandler)
		wafRoute.POST("/sites/:route_id/rule-groups", waf.ReplaceSiteRuleGroupsHandler)
	}
}