Merge pull request #64 from stenwire/whatsapp-intg-v1

Whatsapp intg v1

Author: stenwire

Makefile

@@ -12,7 +12,7 @@ POSTGRES_CONTAINER  ?= $(PROJECT_PREFIX)_postgres
 BACKEND_CONTAINER   ?= $(PROJECT_PREFIX)_backend
 FRONTEND_CONTAINER  ?= $(PROJECT_PREFIX)_frontend
 
-.PHONY: start start-d stop build logs migrate migrate-generate db-shell db-backup db-restore clean ps db-reset db-truncate logs-backend logs-frontend lint-be lint-be-fix lint-fe lint-fe-fix test-be test-be-unit test-be-api test-be-integration test-fe install-hooks setup
+.PHONY: start start-d stop build logs migrate migrate-generate db-shell db-backup db-restore clean ps db-reset db-truncate logs-backend logs-frontend lint-be lint-be-fix lint-fe lint-fe-fix test-be test-be-unit test-be-api test-be-integration test-fe install-hooks setup create-admin
 
 # Start all services (foreground)
 start:
@@ -150,6 +150,18 @@ setup: install-hooks
 	cd frontend && npm ci
 	@echo "Setup complete."
 
+# Create or promote admin user
+# Promote existing user: make create-admin EMAIL=user@example.com
+# Create new admin:      make create-admin EMAIL=admin@example.com PASSWORD=securepass NAME="Admin"
+create-admin:
+	@if [ -z "$(EMAIL)" ]; then \
+		echo "Error: EMAIL is required."; \
+		echo "  Promote existing user: make create-admin EMAIL=user@example.com"; \
+		echo "  Create new admin:      make create-admin EMAIL=admin@example.com PASSWORD=securepass"; \
+		exit 1; \
+	fi
+	docker-compose exec backend uv run python -m scripts.create_admin --email $(EMAIL) $(if $(PASSWORD),--password $(PASSWORD)) $(if $(NAME),--name "$(NAME)")
+
 # Show running containers
 ps:
 	docker-compose ps

backend/alembic/env.py

@@ -9,7 +9,16 @@
 from alembic import context
 
 from app.db.base import Base
-# Import all your models here so they are registered with Base.metadata
+# Import all models so they are registered with Base.metadata
+from app.models.user import User  # noqa: F401
+from app.models.business import Business  # noqa: F401
+from app.models.plan import Plan  # noqa: F401
+from app.models.payment import PaymentTransaction  # noqa: F401
+from app.models.chat_session import ChatSession  # noqa: F401
+from app.models.widget import WidgetSettings, GuestUser, GuestMessage  # noqa: F401
+from app.models.escalation import Escalation  # noqa: F401
+from app.models.document import Document  # noqa: F401
+from app.models.analytics import AnalyticsDailySummary  # noqa: F401
 
 
 # Alembic Config object

backend/alembic/versions/266444da8a8b_add_is_admin_to_users.py

@@ -0,0 +1,29 @@
+"""add_is_admin_to_users
+
+Revision ID: 266444da8a8b
+Revises: b1c2d3e4f5a6
+Create Date: 2026-04-06 20:40:41.699752
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision: str = '266444da8a8b'
+down_revision: Union[str, Sequence[str], None] = 'b1c2d3e4f5a6'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "users",
+        sa.Column("is_admin", sa.Boolean(), nullable=False, server_default=sa.text("false")),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("users", "is_admin")

backend/app/admin/__init__.py

@@ -0,0 +1,50 @@
+from sqladmin.authentication import AuthenticationBackend
+from starlette.requests import Request
+
+from app.db.session import SessionLocal
+from app.models.user import User
+from app.core.security import verify_password
+
+
+class AdminAuth(AuthenticationBackend):
+    async def login(self, request: Request) -> bool:
+        form = await request.form()
+        email = form.get("username")
+        password = form.get("password")
+
+        if not email or not password:
+            return False
+
+        db = SessionLocal()
+        try:
+            user = db.query(User).filter(User.email == email).first()
+            if not user or not user.hashed_password:
+                return False
+            if not verify_password(password, user.hashed_password):
+                return False
+            if not user.is_admin:
+                return False
+
+            request.session.update({"admin_user_id": user.id})
+            return True
+        finally:
+            db.close()
+
+    async def logout(self, request: Request) -> bool:
+        request.session.clear()
+        return True
+
+    async def authenticate(self, request: Request) -> bool:
+        admin_user_id = request.session.get("admin_user_id")
+        if not admin_user_id:
+            return False
+
+        db = SessionLocal()
+        try:
+            user = db.query(User).filter(User.id == admin_user_id).first()
+            if not user or not user.is_admin:
+                request.session.clear()
+                return False
+            return True
+        finally:
+            db.close()