login update

routes/api.php

@@ -570,3 +570,21 @@ Route::middleware(['web', 'auth'])
 
 // ── Artwork search for share modal (public, throttled) ────────────────────────
 // GET /api/search/artworks?q=...&shareable=1  → reuses existing ArtworkSearchController
+
+// ── Stories API (public, throttled) ──────────────────────────────────────────
+Route::middleware(['throttle:60,1'])
+    ->prefix('stories')
+    ->name('api.stories.')
+    ->group(function () {
+        Route::get('/',                 [\App\Http\Controllers\Api\StoriesApiController::class, 'index'])->name('index');
+        Route::get('/featured',         [\App\Http\Controllers\Api\StoriesApiController::class, 'featured'])->name('featured');
+        Route::get('/tag/{tag}',        [\App\Http\Controllers\Api\StoriesApiController::class, 'byTag'])
+            ->where('tag', '[a-z0-9\-]+')
+            ->name('tag');
+        Route::get('/author/{username}',[\App\Http\Controllers\Api\StoriesApiController::class, 'byAuthor'])
+            ->where('username', '[A-Za-z0-9_\-]{1,50}')
+            ->name('author');
+        Route::get('/{slug}',           [\App\Http\Controllers\Api\StoriesApiController::class, 'show'])
+            ->where('slug', '[a-z0-9\-]+')
+            ->name('show');
+    });