require 'roda'
require_relative './auth_middleware'
require_relative './secure_app'

class App < Roda
  route do |r|
    r.root do
      "Welcome to the public API"
    end

    r.get "hello" do
      { message: "Public hello" }.to_json
    end

    # ✅ Apply middleware to the entire /secure/* route
    r.on "secure" do
      r.run AuthMiddleware.new(SecureApp.freeze.app)
    end
  end
end