const express = require('express');
const { protect } = require('../middleware/auth');

const router = express.Router();

router.get('/secret', protect, (req, res) => {
  res.json({
    message: 'You have accessed a protected backend route.',
    user: req.user,
  });
});

module.exports = router;
