middleware('throttle:api')->group(function () { Route::post('/auth/login', [AuthController::class, 'login']); Route::post('/auth/2fa/verify', [AuthController::class, 'verifyTwoFactor']); Route::middleware('auth:sanctum')->group(function () { Route::post('/auth/logout', [AuthController::class, 'logout']); Route::get('/auth/me', [AuthController::class, 'me']); Route::post('/auth/2fa/enable', [AuthController::class, 'enableTwoFactor']); Route::post('/auth/2fa/confirm', [AuthController::class, 'confirmTwoFactor']); Route::post('/auth/2fa/disable', [AuthController::class, 'disableTwoFactor']); Route::get('/mqtt/token', [MqttController::class, 'token']); Route::get('/roles', [RoleController::class, 'index']); Route::get('/users', [UserController::class, 'index']); Route::post('/users', [UserController::class, 'store']); Route::get('/users/{user}', [UserController::class, 'show']); Route::patch('/users/{user}', [UserController::class, 'update']); Route::delete('/users/{user}', [UserController::class, 'destroy']); Route::patch('/users/{user}/role', [UserController::class, 'assignRole']); Route::get('/dashboard/stats', [DashboardController::class, 'stats']); Route::get('/dashboard/activity', [DashboardController::class, 'activity']); }); });