sam-manage/routes/api.php

<?php

use App\Http\Controllers\Api\Admin\DepartmentController;
use App\Http\Controllers\Api\Admin\MenuController;
use App\Http\Controllers\Api\Admin\PermissionController;
use App\Http\Controllers\Api\Admin\RoleController;
use App\Http\Controllers\Api\Admin\RolePermissionController;
use App\Http\Controllers\Api\Admin\TenantController;
use App\Http\Controllers\Api\Admin\UserController;
use Illuminate\Support\Facades\Route;

/*
|--------------------------------------------------------------------------
| API Routes
|--------------------------------------------------------------------------
|
| HTMX 요청 시 HTML 반환, 일반 요청 시 JSON 반환
|
*/

Route::middleware(['web', 'auth'])->prefix('admin')->name('api.admin.')->group(function () {

    // 테넌트 관리 API
    Route::prefix('tenants')->name('tenants.')->group(function () {
        // 고정 경로는 먼저 정의
        Route::get('/stats', [TenantController::class, 'stats'])->name('stats');

        // 동적 경로는 나중에 정의
        Route::get('/', [TenantController::class, 'index'])->name('index');
        Route::post('/', [TenantController::class, 'store'])->name('store');
        Route::get('/{id}', [TenantController::class, 'show'])->name('show');
        Route::put('/{id}', [TenantController::class, 'update'])->name('update');
        Route::delete('/{id}', [TenantController::class, 'destroy'])->name('destroy');

        // 추가 액션
        Route::post('/{id}/restore', [TenantController::class, 'restore'])->name('restore');
        Route::delete('/{id}/force', [TenantController::class, 'forceDestroy'])->name('forceDestroy');
    });

    // 역할 관리 API
    Route::prefix('roles')->name('roles.')->group(function () {
        Route::get('/', [RoleController::class, 'index'])->name('index');
        Route::post('/', [RoleController::class, 'store'])->name('store');
        Route::get('/{id}', [RoleController::class, 'show'])->name('show');
        Route::put('/{id}', [RoleController::class, 'update'])->name('update');
        Route::delete('/{id}', [RoleController::class, 'destroy'])->name('destroy');
    });

    // 부서 관리 API
    Route::prefix('departments')->name('departments.')->group(function () {
        Route::get('/', [DepartmentController::class, 'index'])->name('index');
        Route::post('/', [DepartmentController::class, 'store'])->name('store');
        Route::get('/{id}', [DepartmentController::class, 'show'])->name('show');
        Route::put('/{id}', [DepartmentController::class, 'update'])->name('update');
        Route::delete('/{id}', [DepartmentController::class, 'destroy'])->name('destroy');
        Route::post('/{id}/restore', [DepartmentController::class, 'restore'])->name('restore');
        Route::delete('/{id}/force', [DepartmentController::class, 'forceDelete'])->name('forceDelete');
    });

    // 사용자 관리 API
    Route::prefix('users')->name('users.')->group(function () {
        Route::get('/', [UserController::class, 'index'])->name('index');
        Route::post('/', [UserController::class, 'store'])->name('store');
        Route::get('/{id}', [UserController::class, 'show'])->name('show');
        Route::put('/{id}', [UserController::class, 'update'])->name('update');
        Route::delete('/{id}', [UserController::class, 'destroy'])->name('destroy');

        // 추가 액션
        Route::post('/{id}/restore', [UserController::class, 'restore'])->name('restore');
        Route::delete('/{id}/force', [UserController::class, 'forceDestroy'])->name('forceDestroy');
    });

    // 메뉴 관리 API
    Route::prefix('menus')->name('menus.')->group(function () {
        // 고정 경로는 먼저 정의
        Route::get('/tree', [MenuController::class, 'tree'])->name('tree');

        // 동적 경로는 나중에 정의
        Route::get('/', [MenuController::class, 'index'])->name('index');
        Route::post('/', [MenuController::class, 'store'])->name('store');
        Route::get('/{id}', [MenuController::class, 'show'])->name('show');
        Route::put('/{id}', [MenuController::class, 'update'])->name('update');
        Route::delete('/{id}', [MenuController::class, 'destroy'])->name('destroy');

        // 추가 액션
        Route::post('/{id}/restore', [MenuController::class, 'restore'])->name('restore');
        Route::delete('/{id}/force', [MenuController::class, 'forceDestroy'])->name('forceDestroy');
        Route::post('/{id}/toggle-active', [MenuController::class, 'toggleActive'])->name('toggleActive');
        Route::post('/{id}/toggle-hidden', [MenuController::class, 'toggleHidden'])->name('toggleHidden');
    });

    // 권한 관리 API
    Route::prefix('permissions')->name('permissions.')->group(function () {
        Route::get('/', [PermissionController::class, 'index'])->name('index');
        Route::post('/', [PermissionController::class, 'store'])->name('store');
        Route::get('/{id}', [PermissionController::class, 'show'])->name('show');
        Route::put('/{id}', [PermissionController::class, 'update'])->name('update');
        Route::delete('/{id}', [PermissionController::class, 'destroy'])->name('destroy');
    });

    // 역할 권한 관리 API
    Route::prefix('role-permissions')->name('role-permissions.')->group(function () {
        Route::get('/matrix', [RolePermissionController::class, 'getMatrix'])->name('matrix');
        Route::post('/toggle', [RolePermissionController::class, 'toggle'])->name('toggle');
        Route::post('/allow-all', [RolePermissionController::class, 'allowAll'])->name('allowAll');
        Route::post('/deny-all', [RolePermissionController::class, 'denyAll'])->name('denyAll');
        Route::post('/reset', [RolePermissionController::class, 'reset'])->name('reset');
    });

    // 부서 권한 관리 API
    Route::prefix('department-permissions')->name('department-permissions.')->group(function () {
        Route::get('/matrix', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'getMatrix'])->name('matrix');
        Route::post('/toggle', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'toggle'])->name('toggle');
        Route::post('/allow-all', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'allowAll'])->name('allowAll');
        Route::post('/deny-all', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'denyAll'])->name('denyAll');
        Route::post('/reset', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'reset'])->name('reset');
    });

    // 개인 권한 관리 API
    Route::prefix('user-permissions')->name('user-permissions.')->group(function () {
        Route::get('/matrix', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'getMatrix'])->name('matrix');
        Route::post('/toggle', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'toggle'])->name('toggle');
        Route::post('/allow-all', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'allowAll'])->name('allowAll');
        Route::post('/deny-all', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'denyAll'])->name('denyAll');
        Route::post('/reset', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'reset'])->name('reset');
    });
});