potionx_new

defmodule <%= @web_namespace %>.Router do
  use <%= @web_namespace %>, :router<%= if @html do %>

  pipeline :browser do
    plug :accepts, ["html"]
    plug :fetch_session<%= if @live do %>
    plug :fetch_live_flash
    plug :put_root_layout, {<%= @web_namespace %>.LayoutView, :root}<% else %>
    plug :fetch_flash<% end %>
    plug :protect_from_forgery
    plug :put_secure_browser_headers
    plug Potionx.Plug.ApiAuth, otp_app: :<%= @app_name %>
    plug Potionx.Plug.MaybeRequireAuth, [
      login_path: "/login",
      public_urls: []
    ]
  end<% end %>

  pipeline :graphql do
    plug :accepts, ["json"]
    plug Potionx.Plug.ApiAuth, otp_app: :<%= @app_name %>
    plug Potionx.Plug.ServiceContext
    plug Potionx.Plug.MaybeDisableIntrospection, [roles: [:admin]]
  end

  pipeline :api do
    plug :accepts, ["json"]
    plug Potionx.Plug.ApiAuth, otp_app: :<%= @app_name %>
  end

  pipeline :api_protected do
    plug Pow.Plug.RequireAuthenticated, error_handler: Potionx.Plug.ApiAuthErrorHandler
  end<%= if @html do %>

  # Other scopes may use custom stacks.

  # scope "/api", <%= @web_namespace %> do

  #   pipe_through :api

  # end<% else %>


  scope "/api", <%= @web_namespace %> do
    pipe_through :api
  end<% end %><%= if @dashboard do %>

  # Enables LiveDashboard only for development

  #

  # If you want to use the LiveDashboard in production, you should put

  # it behind authentication and allow only admins to access it.

  # If your application does not have an admins-only section yet,

  # you can use Plug.BasicAuth to set up some basic authentication

  # as long as you are also using SSL (which you should anyway).

  if Mix.env() in [:dev, :test] do
    import Phoenix.LiveDashboard.Router

    scope "/" do<%= if @html do %>
      pipe_through :browser<% else %>
      pipe_through [:fetch_session, :protect_from_forgery]<% end %>
      live_dashboard "/dashboard", metrics: <%= @web_namespace %>.Telemetry
    end
  end<% end %>

  scope "/graphql/v1" do
    pipe_through :graphql

    forward "/", Absinthe.Plug,
      schema: <%= @graphql_namespace %>.Schema
  end


  scope "/api/v1", <%= @web_namespace %>, as: :api_v1 do

    pipe_through :api



    get "/auth/:provider/new", AuthorizationController, :new

    get "/auth/:provider/callback", AuthorizationController, :callback

    post "/auth/:provider/callback", AuthorizationController, :callback

    get "/session/delete", AuthController, :delete

    post "/session/renew", AuthController, :renew

  end

  scope "/", <%= @web_namespace %> do

    pipe_through :browser



    get "/*path", AppController, :index
  end
end