Update main.py

main.py

@@ -264,6 +264,80 @@ def get_single_user(target_uid):
         logging.error(f"Admin failed to fetch user {target_uid}: {e}")
         return jsonify({'error': 'An internal error occurred'}), 500
 
+@app.route('/api/admin/users', methods=['POST'])
+def admin_create_user():
+    """Admin: Create a new user with email, password, and profile information."""
+    try:
+        verify_admin_and_get_uid(request.headers.get('Authorization'))
+        data = request.get_json()
+        
+        # Validate required fields
+        if not data or 'email' not in data or 'password' not in data:
+            return jsonify({'error': 'Email and password are required'}), 400
+        
+        email = data['email']
+        password = data['password']
+        
+        # Optional fields with defaults
+        display_name = data.get('displayName', '')
+        phone = data.get('phone', '')
+        is_admin = data.get('isAdmin', False)
+        
+        # Create user in Firebase Auth
+        user_record = auth.create_user(
+            email=email,
+            password=password,
+            display_name=display_name if display_name else None
+        )
+        
+        # Create user document in Firestore
+        user_data_for_db = {
+            'uid': user_record.uid,
+            'email': email,
+            'displayName': display_name,
+            'phone': phone,
+            'isAdmin': is_admin,
+            'phoneStatus': 'unsubmitted',
+            'organizationId': None,
+            'createdAt': firestore.SERVER_TIMESTAMP,
+            'updatedAt': firestore.SERVER_TIMESTAMP
+        }
+        
+        db.collection('users').document(user_record.uid).set(user_data_for_db)
+        
+        logging.info(f"Admin created new user {user_record.uid} with email {email}")
+        
+        # Create separate dictionary for JSON response with JSON-friendly timestamps
+        response_data = user_data_for_db.copy()
+        current_time = datetime.utcnow().isoformat() + "Z"
+        response_data['createdAt'] = current_time
+        response_data['updatedAt'] = current_time
+        
+        return jsonify({
+            'success': True, 
+            'message': 'User created successfully',
+            'user': response_data
+        }), 201
+        
+    except auth.EmailAlreadyExistsError:
+        return jsonify({'error': 'A user with this email already exists'}), 409
+    except auth.WeakPasswordError:
+        return jsonify({'error': 'Password is too weak. Must be at least 6 characters'}), 400
+    except auth.InvalidEmailError:
+        return jsonify({'error': 'Invalid email format'}), 400
+    except PermissionError as e: 
+        return jsonify({'error': str(e)}), 403
+    except Exception as e:
+        logging.error(f"Admin failed to create user: {e}", exc_info=True)
+        # Handle JSON serialization error from SERVER_TIMESTAMP
+        if 'Object of type Sentinel is not JSON serializable' in str(e):
+            return jsonify({
+                'success': True, 
+                'message': 'User created successfully, but response generation had a minor issue.',
+                'uid': user_record.uid if 'user_record' in locals() else None
+            }), 201
+        return jsonify({'error': 'An internal error occurred during user creation'}), 500
+
 @app.route('/api/admin/users/<string:target_uid>', methods=['PUT'])
 def admin_update_user(target_uid):
     """Admin: Update a user's profile information."""