Learn_System/backend/src/routes/games.js

const router = require('express').Router();
const { authMiddleware, requirePermissionForStudents } = require('../middleware/auth');
const { requireFeature } = require('../middleware/features');
const c = require('../controllers/gamesController');

const hangman   = requireFeature('hangman');
const crossword = requireFeature('crossword');
// Ролевой доступ к учебным играм: ученик без права games.play закрыт, учитель/админ — нет.
const playable  = requirePermissionForStudents('games.play');

router.get('/hangman/word',         hangman,   authMiddleware, playable, c.hangmanWord);
router.post('/hangman/complete',    hangman,   authMiddleware, playable, c.hangmanComplete);
router.get('/crossword/generate',   crossword, authMiddleware, playable, c.crosswordGenerate);
router.post('/crossword/complete',  crossword, authMiddleware, playable, c.crosswordComplete);

module.exports = router;