Update main.py

main.py

@@ -1469,6 +1469,51 @@ def send_notifications():
 
     except Exception as e:
         return jsonify({'error': str(e)}), 500
+
+@app.route('/api/admin/feedback', methods=['GET'])
+def admin_view_feedback():
+    """
+    Allows an admin to view all feedback entries (or optionally filter by type/status).
+    """
+    try:
+        # 1) Verify admin
+        admin_uid = verify_admin(request.headers.get('Authorization', ''))
+        if not admin_uid:
+            return jsonify({'error': 'Unauthorized: Admin access required'}), 401
+
+        # 2) Optional: parse query params for filtering, e.g. ?type=bug or ?status=open
+        feedback_type = request.args.get('type')  # e.g. "bug", "feature_request", "general"
+        feedback_status = request.args.get('status')  # e.g. "open", "resolved"
+
+        # 3) Fetch all feedback
+        feedback_ref = db.reference('feedback')
+        all_feedback = feedback_ref.get() or {}
+
+        # Convert dict to list
+        feedback_list = []
+        for fb_id, fb_data in all_feedback.items():
+            # If we have a filter for type
+            if feedback_type and fb_data.get('type') != feedback_type:
+                continue
+            # If we have a filter for status
+            if feedback_status and fb_data.get('status') != feedback_status:
+                continue
+
+            feedback_list.append({
+                'feedback_id': fb_id,
+                'user_id': fb_data.get('user_id'),
+                'user_email': fb_data.get('user_email'),
+                'type': fb_data.get('type', 'general'),
+                'message': fb_data.get('message', ''),
+                'created_at': fb_data.get('created_at'),
+                'status': fb_data.get('status', 'open')
+            })
+
+        return jsonify({'feedback': feedback_list}), 200
+
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+        
 # ---------- Admin Endpoint to Directly Update Credits ----------
 @app.route('/api/admin/users/<string:uid>/credits', methods=['PUT'])
 def admin_update_credits(uid):