added Delete Account_6

app.py

@@ -3,6 +3,7 @@ load_dotenv()
 
 from fastapi.responses import StreamingResponse
 import json
+import requests
 from fastapi import FastAPI, HTTPException, Depends
 from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
 from fastapi.middleware.cors import CORSMiddleware
@@ -10,7 +11,6 @@ from pydantic import BaseModel
 from fiscal import get_answer, clear_memory, stream_answer
 from auth import verify_token
 from plaid_client import get_financial_snapshot
-from supabase import create_client
 import os
 
 app = FastAPI(title="FISCAL API")
@@ -22,20 +22,8 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-SANDBOX_ACCESS_TOKEN = os.environ["PLAID_ACCESS_TOKEN"]
-
-# Initialize Supabase admin client once at startup
-supabase_url = os.environ.get("SUPABASE_URL", "")
-service_key = os.environ.get("SUPABASE_SERVICE_KEY", "")
-
-if supabase_url and service_key:
-    supabase_admin = create_client(supabase_url, service_key)
-else:
-    supabase_admin = None
-    print("WARNING: SUPABASE_SERVICE_KEY not set - account deletion disabled")
-
 security = HTTPBearer()
-
+SANDBOX_ACCESS_TOKEN = os.environ["PLAID_ACCESS_TOKEN"]
 
 class ChatRequest(BaseModel):
     message: str
@@ -107,31 +95,47 @@ def chat_stream(
 
 
 
+
+
 @app.delete("/account")
 def delete_account(
     credentials: HTTPAuthorizationCredentials = Depends(security),
 ):
-    if supabase_admin is None:
-        raise HTTPException(status_code=503, detail="Account deletion not configured")
-
     user = verify_token(credentials.credentials)
     if not user:
         raise HTTPException(status_code=401, detail="Unauthorized")
 
     user_id = user["sub"]
+    supabase_url = os.environ.get("SUPABASE_URL", "")
+    service_key = os.environ.get("SUPABASE_SERVICE_KEY", "")
 
-    try:
-        supabase_admin.table("bank_connections")\
-            .delete()\
-            .eq("user_id", user_id)\
-            .execute()
-
-        supabase_admin.table("profiles")\
-            .delete()\
-            .eq("id", user_id)\
-            .execute()
+    headers = {
+        "apikey": service_key,
+        "Authorization": f"Bearer {service_key}",
+        "Content-Type": "application/json"
+    }
 
-        supabase_admin.auth.admin.delete_user(user_id)
+    try:
+        # 1. Delete bank connections
+        requests.delete(
+            f"{supabase_url}/rest/v1/bank_connections?user_id=eq.{user_id}",
+            headers=headers
+        )
+
+        # 2. Delete profile
+        requests.delete(
+            f"{supabase_url}/rest/v1/profiles?id=eq.{user_id}",
+            headers=headers
+        )
+
+        # 3. Delete auth user via Admin API
+        response = requests.delete(
+            f"{supabase_url}/auth/v1/admin/users/{user_id}",
+            headers=headers
+        )
+
+        if response.status_code not in [200, 204]:
+            raise Exception(f"Auth delete failed: {response.text}")
 
         return {"status": "account deleted"}