<?php

use App\Modules\Identity\Http\RequireCompanyContext;
use App\Modules\Identity\Http\RequireValidSession;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;
use Tempo\Purchasing\Delivery\InitialAuthority;

// Deployment composition must explicitly register this file. Never loaded by the installed host.
require_once __DIR__.'/AccessOverlay.php';
require_once __DIR__.'/InitialAuthority.php';
Route::middleware(['web', 'auth', RequireValidSession::class, RequireCompanyContext::class])->group(function () {
    Route::get('/purchasing/internal-requisitions/access-initialisation', function (Request $request) {
        $options = (new InitialAuthority)->options($request);
        ob_start();
        require __DIR__.'/screen.php';

        return response(ob_get_clean())->header('Cache-Control', 'private, no-store');
    });
    Route::post('/api/internal-requisitions/access-initialisation', function (Request $request) {
        return response()->json((new InitialAuthority)->initialise($request))->header('Cache-Control', 'private, no-store');
    });
});