Update main.py

main.py

@@ -390,6 +390,55 @@ def get_user_profile():
     except Exception as e:
         return jsonify({'error': str(e)}), 500
 
+# Receipt endpoints
+@app.route('/api/admin/receipt/<string:transaction_id>/view', methods=['GET'])
+def view_receipt(transaction_id):
+    try:
+        verify_admin(request.headers.get('Authorization', ''))
+        transaction_ref = db.reference(f'transactions/{transaction_id}')
+        transaction_data = transaction_ref.get()
+        if not transaction_data:
+            return jsonify({'error': 'Transaction not found'}), 404
+
+        image_url = transaction_data.get('image_url')
+        if not image_url:
+            return jsonify({'error': 'No receipt image found for this transaction'}), 404
+
+        # Fetch the image from the public URL
+        r = requests.get(image_url)
+        if r.status_code != 200:
+            return jsonify({'error': 'Unable to fetch image from storage'}), 500
+
+        return send_file(io.BytesIO(r.content), mimetype='image/jpeg')
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+
+@app.route('/api/admin/receipt/<string:transaction_id>/download', methods=['GET'])
+def download_receipt(transaction_id):
+    try:
+        verify_admin(request.headers.get('Authorization', ''))
+        transaction_ref = db.reference(f'transactions/{transaction_id}')
+        transaction_data = transaction_ref.get()
+        if not transaction_data:
+            return jsonify({'error': 'Transaction not found'}), 404
+
+        image_url = transaction_data.get('image_url')
+        if not image_url:
+            return jsonify({'error': 'No receipt image found for this transaction'}), 404
+
+        r = requests.get(image_url)
+        if r.status_code != 200:
+            return jsonify({'error': 'Unable to fetch image from storage'}), 500
+
+        return send_file(
+            io.BytesIO(r.content),
+            mimetype='image/jpeg',
+            as_attachment=True,
+            download_name='receipt.jpg'
+        )
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+
 
 # delete users