export default defineEventHandler((event) => {
  const protectedRoutes = ['/dashboard', '/auth', '/classroom', '/browse']
  const path = getRequestPath(event)

  if (protectedRoutes.some(route => path.startsWith(route))) {
    setResponseHeader(event, 'Cache-Control', 'no-cache, no-store, must-revalidate')
    setResponseHeader(event, 'Pragma', 'no-cache')
    setResponseHeader(event, 'Expires', '0')
  }
})