archetecture security fix

routes/api.php

@@ -29,6 +29,7 @@ use App\Http\Controllers\Api\Email\EmailController;
 use App\Http\Controllers\Api\Email\EmailExtractorController;
 use App\Http\Controllers\Api\Communication\CommunicationController;
 use App\Http\Controllers\Api\CompetitionScores\CompetitionScoresController;
+use App\Http\Controllers\Api\CompetitionWinners\CompetitionWinnersController;
 use App\Http\Controllers\Api\Discounts\DiscountController;
 use App\Http\Controllers\Api\Expenses\ExpenseController;
 use App\Http\Controllers\Api\ExtraCharges\ExtraChargesController;
@@ -941,6 +942,22 @@ Route::prefix('v1')->group(function () {
             Route::post('{id}', [CompetitionScoresController::class, 'save']);
         });
 
+        Route::prefix('competition-winners')->group(function () {
+            Route::get('/', [CompetitionWinnersController::class, 'index']);
+            Route::get('create', [CompetitionWinnersController::class, 'createForm']);
+            Route::post('/', [CompetitionWinnersController::class, 'store']);
+            Route::get('{id}/settings', [CompetitionWinnersController::class, 'settingsForm']);
+            Route::put('{id}', [CompetitionWinnersController::class, 'update']);
+            Route::get('{id}/scores', [CompetitionWinnersController::class, 'scores']);
+            Route::post('{id}/scores', [CompetitionWinnersController::class, 'saveScores']);
+            Route::get('{id}/preview', [CompetitionWinnersController::class, 'preview']);
+            Route::get('{id}/winners', [CompetitionWinnersController::class, 'winners']);
+            Route::post('{id}/publish', [CompetitionWinnersController::class, 'publish']);
+            Route::post('{id}/lock', [CompetitionWinnersController::class, 'lock']);
+            Route::post('{id}/unlock', [CompetitionWinnersController::class, 'unlock']);
+            Route::post('{id}/export-quiz', [CompetitionWinnersController::class, 'exportQuiz']);
+        });
+
         Route::prefix('discounts')->group(function () {
             Route::get('/', [DiscountController::class, 'options']);
             Route::get('options', [DiscountController::class, 'options']);