import express from 'express';

import UserController from '../controllers/User';
import Authorization from '../middleware/Authorization';
import BookController from '../controllers/Book';

const app = express.Router();

// Sign up route
app.route('/signup')
  .post(Authorization.checkUserInput, UserController.create);

// Sign in route
app.route('/signin')
  .post(Authorization.validateLogin, UserController.login);

// Get all users
app.route('/all')
  .get(Authorization.isLoggedIn, Authorization.getUsers);

// Rent a book
app.route('/:userId/books/:bookId')
  .post(Authorization.isLoggedIn, BookController.rentBook);

// Return rented book
app.route('/:userId/books/:bookId')
  .put(Authorization.isLoggedIn, BookController.returnBook);

// Get rented books
app.route('/:userId/books')
  .get(Authorization.isLoggedIn, BookController.rentedBooks);
export default app;

@@ -481,16 +481,39 @@
 oggedIn,
+ Authorization.isAdmin,
  Authori

secure the get all users route