SaaS-PDF/backend/app/routes/admin.py

"""Internal admin endpoints secured by authenticated admin sessions."""
from flask import Blueprint, jsonify, request

from app.extensions import limiter
from app.services.account_service import get_user_by_id, is_user_admin, set_user_role, update_user_plan
from app.services.admin_service import (
    get_admin_overview,
    list_admin_contacts,
    list_admin_users,
    mark_admin_contact_read,
)
from app.services.ai_cost_service import get_monthly_spend
from app.utils.auth import get_current_user_id

admin_bp = Blueprint("admin", __name__)


def _require_admin_session():
    """Return an error response unless the request belongs to an authenticated admin."""
    user_id = get_current_user_id()
    if user_id is None:
        return jsonify({"error": "Authentication required."}), 401
    if not is_user_admin(user_id):
        return jsonify({"error": "Admin access required."}), 403
    return None


@admin_bp.route("/overview", methods=["GET"])
@limiter.limit("60/hour")
def admin_overview_route():
    """Return the internal admin dashboard overview."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    return jsonify(get_admin_overview()), 200


@admin_bp.route("/users", methods=["GET"])
@limiter.limit("60/hour")
def admin_users_route():
    """Return recent users plus usage summaries for the admin dashboard."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    query = request.args.get("query", "")
    try:
        limit = max(1, min(int(request.args.get("limit", 25)), 100))
    except ValueError:
        limit = 25

    return jsonify({"items": list_admin_users(limit=limit, query=query)}), 200


@admin_bp.route("/contacts", methods=["GET"])
@limiter.limit("60/hour")
def admin_contacts_route():
    """Return paginated contact messages for the admin dashboard."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    try:
        page = max(1, int(request.args.get("page", 1)))
    except ValueError:
        page = 1

    try:
        per_page = max(1, min(int(request.args.get("per_page", 20)), 100))
    except ValueError:
        per_page = 20

    return jsonify(list_admin_contacts(page=page, per_page=per_page)), 200


@admin_bp.route("/contacts/<int:message_id>/read", methods=["POST"])
@limiter.limit("120/hour")
def admin_contacts_mark_read_route(message_id: int):
    """Mark one contact message as read."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    if not mark_admin_contact_read(message_id):
        return jsonify({"error": "Message not found."}), 404

    return jsonify({"message": "Message marked as read."}), 200


@admin_bp.route("/users/<int:user_id>/plan", methods=["POST"])
@limiter.limit("30/hour")
def update_plan_route(user_id: int):
    """Change the plan for one user — admin session required."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    data = request.get_json(silent=True) or {}
    plan = str(data.get("plan", "")).strip().lower()
    if plan not in ("free", "pro"):
        return jsonify({"error": "Plan must be 'free' or 'pro'."}), 400

    user = get_user_by_id(user_id)
    if user is None:
        return jsonify({"error": "User not found."}), 404

    try:
        updated = update_user_plan(user_id, plan)
    except ValueError as exc:
        return jsonify({"error": str(exc)}), 400

    return jsonify({"message": "Plan updated.", "user": updated}), 200


@admin_bp.route("/users/<int:user_id>/role", methods=["POST"])
@limiter.limit("30/hour")
def update_role_route(user_id: int):
    """Change the role for one user — admin session required."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    actor_user_id = get_current_user_id()
    data = request.get_json(silent=True) or {}
    role = str(data.get("role", "")).strip().lower()
    if role not in ("user", "admin"):
        return jsonify({"error": "Role must be 'user' or 'admin'."}), 400

    user = get_user_by_id(user_id)
    if user is None:
        return jsonify({"error": "User not found."}), 404

    if bool(user.get("is_allowlisted_admin")):
        return jsonify({"error": "Allowlisted admin access is managed by INTERNAL_ADMIN_EMAILS."}), 400

    if actor_user_id == user_id and role != "admin":
        return jsonify({"error": "You cannot remove your own admin role."}), 400

    try:
        updated = set_user_role(user_id, role)
    except ValueError as exc:
        return jsonify({"error": str(exc)}), 400

    return jsonify({"message": "Role updated.", "user": updated}), 200


@admin_bp.route("/ai-cost", methods=["GET"])
@limiter.limit("60/hour")
def ai_cost_dashboard():
    """Return the current month's AI spending summary."""
    auth_error = _require_admin_session()
    if auth_error:
        return auth_error

    spend = get_monthly_spend()
    return jsonify(spend), 200