Update main.py

main.py

@@ -229,38 +229,133 @@ def get_spending_overview():
     except Exception as e:
         return jsonify({'error': str(e)}), 500
 
-@app.route('/api/admin/global-overview', methods=['GET'])
-def get_global_overview():
+# ... (previous imports remain the same)
+
+# ========================================
+# Modified verify_admin function (now checks database is_admin flag)
+# ========================================
+def verify_admin(auth_header):
+    if not auth_header.startswith('Bearer '):
+        raise ValueError('Invalid token')
+    
+    token = auth_header.split(' ')[1]
+    uid = verify_token(token)
+    if not uid:
+        raise PermissionError('Invalid user')
+    
+    user_ref = db.reference(f'users/{uid}')
+    user_data = user_ref.get()
+    if not user_data or not user_data.get('is_admin', False):
+        raise PermissionError('Admin access required')
+
+# ========================================
+# New Admin Endpoints
+# ========================================
+@app.route('/api/admin/overview', methods=['GET'])
+def get_admin_overview():
     try:
         verify_admin(request.headers.get('Authorization', ''))
         
-        transactions_ref = db.reference('transactions')
+        # Get all users
         users_ref = db.reference('users')
+        all_users = users_ref.get() or {}
+        users_list = []
+        for uid, user_data in all_users.items():
+            try:
+                auth_user = auth.get_user(uid)
+                email = auth_user.email
+            except:
+                email = "Deleted User"
+            users_list.append({
+                'uid': uid,
+                'email': email,
+                'daily_cash': user_data.get('daily_cash', 100),
+                'remaining_cash': user_data.get('remaining_cash', 100),
+                'last_reset': user_data.get('last_reset'),
+                'is_admin': user_data.get('is_admin', False)
+            })
+
+        # Get all transactions
+        transactions_ref = db.reference('transactions')
+        all_transactions = transactions_ref.get() or {}
+        transactions_list = [{'id': tid, **data} for tid, data in all_transactions.items()]
+
+        return jsonify({
+            'users': users_list,
+            'transactions': transactions_list,
+            'analytics': {
+                'total_users': len(users_list),
+                'total_transactions': len(transactions_list),
+                'total_spent': sum(t['total'] for t in transactions_list)
+            }
+        })
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+
+@app.route('/api/admin/users', methods=['POST'])
+def create_user():
+    try:
+        verify_admin(request.headers.get('Authorization', ''))
+        data = request.get_json()
         
-        transactions = pd.DataFrame(transactions_ref.get().values())
-        users = pd.DataFrame(users_ref.get().values())
+        # Create Firebase auth user
+        user = auth.create_user(
+            email=data['email'],
+            password=data['password']
+        )
         
-        merged = pd.merge(transactions, users, left_on='uid', right_on='uid')
+        # Create database user record
+        user_ref = db.reference(f'users/{user.uid}')
+        user_data = {
+            'daily_cash': data.get('daily_cash', 100),
+            'remaining_cash': data.get('daily_cash', 100),
+            'last_reset': '2000-01-01T00:00:00+00:00',  # Force reset on next check
+            'is_admin': data.get('is_admin', False)
+        }
+        user_ref.set(user_data)
         
         return jsonify({
-            'user_spending': merged.groupby('uid')['total'].sum().to_dict(),
-            'all_transactions': transactions.sort_values(by='timestamp', ascending=False)
-                .to_dict(orient='records')
+            'success': True,
+            'user': {
+                'uid': user.uid,
+                'email': user.email,
+                **user_data
+            }
+        }), 201
+    except Exception as e:
+        return jsonify({'error': str(e)}), 400
+
+@app.route('/api/admin/users/<string:uid>/limit', methods=['PUT'])
+def update_user_limit(uid):
+    try:
+        verify_admin(request.headers.get('Authorization', ''))
+        data = request.get_json()
+        new_limit = float(data['daily_cash'])
+        
+        user_ref = db.reference(f'users/{uid}')
+        user_data = user_ref.get()
+        
+        if not user_data:
+            return jsonify({'error': 'User not found'}), 404
+            
+        updates = {'daily_cash': new_limit}
+        
+        # Adjust remaining cash if it exceeds new limit
+        current_remaining = user_data.get('remaining_cash', new_limit)
+        if current_remaining > new_limit:
+            updates['remaining_cash'] = new_limit
+            
+        user_ref.update(updates)
+        
+        return jsonify({
+            'success': True,
+            'new_daily_cash': new_limit,
+            'updated_remaining': updates.get('remaining_cash', current_remaining)
         })
     except Exception as e:
-        return jsonify({'error': str(e)}), 500
+        return jsonify({'error': str(e)}), 400
+
 
-# Helper function to verify admin status
-def verify_admin(auth_header):
-    if not auth_header.startswith('Bearer '):
-        raise ValueError('Invalid token')
-    
-    token = auth_header.split(' ')[1]
-    uid = verify_token(token)
-    user = auth.get_user(uid)
-    
-    if not user.custom_claims or not user.custom_claims.get('admin'):
-        raise PermissionError('Admin access required')
 
 # User management endpoint for profile
 @app.route('/api/user/profile', methods=['GET'])