first commit

backend/app/routers/admin_users.py

@@ -0,0 +1,44 @@
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+
+from app.auth import hash_password, require_super_admin
+from app.database import get_db
+from app.models import AdminUser
+from app.schemas import AdminUserCreate, AdminUserPublic, SubscriberPublic
+from app.models import NewsletterSubscriber
+
+router = APIRouter(prefix="/api/admin", tags=["admin-users"])
+
+
+@router.get("/users", response_model=list[AdminUserPublic])
+def list_users(db: Session = Depends(get_db), _: AdminUser = Depends(require_super_admin)):
+    return db.query(AdminUser).order_by(AdminUser.id).all()
+
+
+@router.post("/users", response_model=AdminUserPublic)
+def create_user(
+    body: AdminUserCreate,
+    db: Session = Depends(get_db),
+    _: AdminUser = Depends(require_super_admin),
+):
+    if db.query(AdminUser).filter(AdminUser.email == body.email).first():
+        raise HTTPException(status_code=400, detail="Email already registered")
+    user = AdminUser(
+        email=body.email,
+        hashed_password=hash_password(body.password),
+        role=body.role,
+    )
+    db.add(user)
+    db.commit()
+    db.refresh(user)
+    return AdminUserPublic.model_validate(user)
+
+
+@router.get("/subscribers", response_model=list[SubscriberPublic])
+def list_subscribers(db: Session = Depends(get_db), _: AdminUser = Depends(require_super_admin)):
+    return (
+        db.query(NewsletterSubscriber)
+        .order_by(NewsletterSubscriber.id.desc())
+        .limit(500)
+        .all()
+    )