feat(system_users): Complete staff mobile OTP login implementation with token generation

- Add necessary imports for datetime, logging, and service dependencies
- Implement access token creation with configurable expiration from settings
- Add token payload with user credentials (user_id, username, role, merchant details)
- Convert user model to UserInfoResponse for response serialization
- Return StaffMobileOTPLoginResponse with access token, token type, and expiration
- Add login endpoint stub for standard authentication flow
- Organize imports at module level for better code structure and maintainability

app/system_users/controllers/router.py

@@ -1,6 +1,22 @@
 from pydantic import BaseModel, Field
 from fastapi import APIRouter, Depends, HTTPException, status, Request
 from fastapi.security import HTTPAuthorizationCredentials
+from datetime import timedelta
+from typing import Optional
+import logging
+
+from app.system_users.services.service import SystemUserService
+from app.system_users.schemas.schema import (
+    LoginRequest, LoginResponse, CreateUserRequest, UpdateUserRequest,
+    ChangePasswordRequest, ForgotPasswordRequest, VerifyResetTokenRequest,
+    ResetPasswordRequest, UserInfoResponse, UserListResponse, UserListRequest,
+    StandardResponse, UserStatus
+)
+from app.system_users.models.model import SystemUserModel
+from app.dependencies.auth import get_current_user, require_admin_role, get_system_user_service
+from app.core.config import settings
+
+logger = logging.getLogger(__name__)
 
 # Router must be defined before any usage
 router = APIRouter(
@@ -39,7 +55,35 @@ async def staff_login_mobile_otp(
     # Only allow staff/employee roles (not admin/super_admin)
     if user.role in ("admin", "super_admin"):
         raise HTTPException(status_code=403, detail="Admin login not allowed via staff OTP login")
-    # ...existing code...
+    
+    # Create access token for staff user
+    from datetime import timedelta
+    from app.core.config import settings
+    
+    access_token_expires = timedelta(hours=settings.TOKEN_EXPIRATION_HOURS)
+    access_token = user_service.create_access_token(
+        data={
+            "sub": user.user_id, 
+            "username": user.username, 
+            "role": user.role, 
+            "merchant_id": user.merchant_id,
+            "merchant_type": user.merchant_type
+        },
+        expires_delta=access_token_expires
+    )
+    
+    user_info = user_service.convert_to_user_info_response(user)
+    
+    return StaffMobileOTPLoginResponse(
+        access_token=access_token,
+        token_type="bearer",
+        expires_in=int(access_token_expires.total_seconds()),
+        user_info=user_info
+    )
+
+
+@router.post("/login", response_model=LoginResponse)
+async def login(
     request: Request,
     login_data: LoginRequest,
     user_service: SystemUserService = Depends(get_system_user_service)