flox/backend/routes/web.php

<?php

  Route::prefix('api')->group(function() {
    Route::get('/logout', 'UserController@logout');
    Route::post('/login', 'UserController@login');

    Route::get('/episodes/{tmdbId}', 'ItemController@episodes');
    Route::get('/items/{type}/{orderBy}/{sortDirection}', 'ItemController@items');
    Route::get('/search-items', 'ItemController@search');

    Route::get('/item/{tmdbId}/{mediaType}', 'SubpageController@item');
    Route::get('/imdb-rating/{imdbId}', 'SubpageController@imdbRating');

    Route::get('/suggestions/{tmdbID}/{mediaType}', 'TMDBController@suggestions');
    Route::get('/genres', 'GenreController@allGenres');
    Route::get('/genre/{genre}', 'TMDBController@genre');
    Route::get('/trending', 'TMDBController@trending');
    Route::get('/upcoming', 'TMDBController@upcoming');
    Route::get('/now-playing', 'TMDBController@nowPlaying');

    Route::patch('/refresh-all', 'ItemController@refreshAll');
    Route::get('/settings', 'SettingController@settings');

    Route::middleware('auth')->group(function() {
      Route::get('/check-update', 'SettingController@checkForUpdate');
      Route::get('/version', 'SettingController@getVersion');
      Route::patch('/settings', 'SettingController@updateSettings');

      Route::post('/add', 'ItemController@add');
      Route::post('/watchlist', 'ItemController@watchlist');
      Route::patch('/update-alternative-titles/{tmdbId?}', 'ItemController@updateAlternativeTitles');
      Route::patch('/update-genre', 'ItemController@updateGenre');
      // todo: in patch
      Route::get('/update-genre-lists', 'GenreController@updateGenreLists');
      Route::patch('/toggle-episode/{id}', 'ItemController@toggleEpisode');
      Route::patch('/toggle-season', 'ItemController@toggleSeason');
      Route::patch('/change-rating/{itemId}', 'ItemController@changeRating');
      Route::patch('/refresh/{itemId}', 'ItemController@refresh');
      Route::delete('/remove/{itemId}', 'ItemController@remove')->middleware('csrf');

      Route::get('/userdata', 'UserController@getUserData');
      Route::patch('/userdata', 'UserController@changeUserData')->middleware('csrf');

      Route::get('/search-tmdb', 'TMDBController@search');

      Route::post('/fetch-files', 'FileParserController@call');

      Route::get('/video/{type}/{id}', 'VideoController@serve');
    });
  });
  
  Route::fallback('HomeController@app');