2 files changed, 52 insertions, 6 deletions

diff --git a/backend/middleware/auth.go b/backend/api/auth.go
index 0744b3d..91ef80c 100644
--- a/backend/middleware/auth.go
+++ b/backend/api/auth.go
@@ -1,4 +1,4 @@
-package middleware
+package api
 
 import (
         "fmt"
@@ -16,7 +16,7 @@ func CheckAuth(c *gin.Context) {
         // Validate token
         token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
                 if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
-                        return nil, fmt.Errorf("Unexpected signing method: %v", token.Header["alg"])
+                        return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
                 }
                 return []byte(os.Getenv("SECRET_KEY")), nil
         })
@@ -44,14 +44,19 @@ func CheckAuth(c *gin.Context) {
                         return
                 }
                 // Get user titles from DB
-                user.Titles = []string{}
-                rows, _ := database.DB.Query(`SELECT t.title_name FROM titles t WHERE t.user_id = $1`, user.SteamID)
+                var moderator bool
+                user.Titles = []models.Title{}
+                rows, _ := database.DB.Query(`SELECT t.title_name, t.title_color FROM titles t INNER JOIN user_titles ut ON t.id=ut.title_id WHERE ut.user_id = $1`, user.SteamID)
                 for rows.Next() {
-                        var title string
-                        rows.Scan(&title)
+                        var title models.Title
+                        rows.Scan(&title.Name, &title.Color)
+                        if title.Name == "Moderator" {
+                                moderator = true
+                        }
                         user.Titles = append(user.Titles, title)
                 }
                 c.Set("user", user)
+                c.Set("mod", moderator)
                 c.Next()
         } else {
                 c.Next()
diff --git a/backend/api/routes.go b/backend/api/routes.go
new file mode 100644
index 0000000..fd3b8cc
--- /dev/null
+++ b/backend/api/routes.go
@@ -0,0 +1,41 @@
+package api
+
+import (
+        "github.com/gin-gonic/gin"
+        "github.com/pektezol/leastportalshub/backend/handlers"
+        swaggerfiles "github.com/swaggo/files"
+        ginSwagger "github.com/swaggo/gin-swagger"
+)
+
+func InitRoutes(router *gin.Engine) {
+        api := router.Group("/api")
+        {
+                v1 := api.Group("/v1")
+                v1.GET("/swagger/*any", ginSwagger.WrapHandler(swaggerfiles.Handler))
+                v1.GET("/", func(c *gin.Context) {
+                        c.File("docs/index.html")
+                })
+                v1.GET("/token", handlers.GetCookie)
+                v1.DELETE("/token", handlers.DeleteCookie)
+                v1.GET("/login", handlers.Login)
+                v1.GET("/profile", CheckAuth, handlers.Profile)
+                v1.PUT("/profile", CheckAuth, handlers.UpdateCountryCode)
+                v1.POST("/profile", CheckAuth, handlers.UpdateUser)
+                v1.GET("/users/:id", CheckAuth, handlers.FetchUser)
+                v1.GET("/demos", handlers.DownloadDemoWithID)
+                v1.GET("/maps/:id/summary", handlers.FetchMapSummary)
+                v1.POST("/maps/:id/summary", CheckAuth, handlers.CreateMapSummary)
+                v1.PUT("/maps/:id/summary", CheckAuth, handlers.EditMapSummary)
+                v1.DELETE("/maps/:id/summary", CheckAuth, handlers.DeleteMapSummary)
+                v1.PUT("/maps/:id/image", CheckAuth, handlers.EditMapImage)
+                v1.GET("/maps/:id/leaderboards", handlers.FetchMapLeaderboards)
+                v1.POST("/maps/:id/record", CheckAuth, handlers.CreateRecordWithDemo)
+                v1.GET("/rankings", handlers.Rankings)
+                v1.GET("/search", handlers.SearchWithQuery)
+                v1.GET("/games", handlers.FetchGames)
+                v1.GET("/games/:id", handlers.FetchChapters)
+                v1.GET("/chapters/:id", handlers.FetchChapterMaps)
+                v1.GET("/logs/score", handlers.ScoreLogs)
+                v1.GET("/logs/mod", CheckAuth, handlers.ModLogs)
+        }
+}