routes/admin.js

const express = require('express');
const router  = express.Router();
const path    = require('path');
const { requireAdmin } = require('../middleware/auth');

router.get('/login', (req, res) => {
  if(req.session.isAdmin) return res.redirect('/admin');
  res.sendFile(path.join(__dirname, '../public/admin/login.html'));
});

router.post('/login', (req, res) => {
  const { password } = req.body;
  if(password === process.env.ADMIN_PASS) {
    req.session.isAdmin = true;
    res.json({ success: true });
  } else {
    res.status(401).json({ error: 'Mot de passe incorrect' });
  }
});

router.get('/logout', (req, res) => {
  req.session.destroy();
  res.redirect('/admin/login');
});

router.get('/',         requireAdmin, (req,res) => res.sendFile(path.join(__dirname,'../public/admin/index.html')));
router.get('/sources',  requireAdmin, (req,res) => res.sendFile(path.join(__dirname,'../public/admin/sources.html')));
router.get('/schedule', requireAdmin, (req,res) => res.sendFile(path.join(__dirname,'../public/admin/schedule.html')));
router.get('/docs',     requireAdmin, (req,res) => res.sendFile(path.join(__dirname,'../public/admin/docs.html')));

module.exports = router;