app.post("/place-order", async (req, res) => {
const { items, user } = req.body;
const response = await fetch("https://app.qubeguard.com/control", {
method: "POST",
headers: { "Content-Type": "application/json", "x-api-key": "YOUR_API_KEY" },
body: JSON.stringify(req.body),
});
if (response.status !== 200) {
return res.status(403).json({ error: "Request blocked by Control API" });
}
res.status(200).json({ message: "Order placed successfully" });
});