Update routes/approvals.py

routes/approvals.py

@@ -11,6 +11,7 @@ from collections import defaultdict
 
 router = APIRouter()
 
+# 📦 Models
 class ApproveAccountRequest(BaseModel):
     user_id: str
 
@@ -18,12 +19,13 @@ class RejectAccountRequest(BaseModel):
     user_id: str
     reason: Optional[str] = None
 
-# Configuração do Supabase
+# 🔥 Supabase Configuração com Secrets
 SUPABASE_URL = "https://ussxqnifefkgkaumjann.supabase.co"
 SUPABASE_KEY = os.getenv("SUPA_KEY")
+SUPABASE_ROLE_KEY = os.getenv("SUPA_SERVICE_KEY")
 
-if not SUPABASE_KEY:
-    raise ValueError("❌ SUPA_KEY não foi definido no ambiente!")
+if not SUPABASE_KEY or not SUPABASE_ROLE_KEY:
+    raise ValueError("❌ SUPA_KEY ou SUPA_SERVICE_KEY não foram definidos no ambiente!")
 
 SUPABASE_HEADERS = {
     "apikey": SUPABASE_KEY,
@@ -31,11 +33,17 @@ SUPABASE_HEADERS = {
     "Content-Type": "application/json"
 }
 
-# Configuração do logging
+SUPABASE_ROLE_HEADERS = {
+    "apikey": SUPABASE_ROLE_KEY,
+    "Authorization": f"Bearer {SUPABASE_ROLE_KEY}",
+    "Content-Type": "application/json"
+}
+
+# ⚙️ Logging
 logging.basicConfig(level=logging.INFO)
 logger = logging.getLogger(__name__)
 
-# Cache de admin
+# 🔒 Cache de admin
 @lru_cache(maxsize=128)
 def get_cached_admin_status(user_id: str) -> bool:
     user_data_url = f"{SUPABASE_URL}/rest/v1/User?id=eq.{user_id}"
@@ -47,6 +55,7 @@ def get_cached_admin_status(user_id: str) -> bool:
     user_info = response.json()[0]
     return user_info.get("is_admin", False)
 
+# 🔐 Verificação de token com permissões normais
 async def verify_admin_token(user_token: str) -> str:
     headers = {
         "Authorization": f"Bearer {user_token}",
@@ -71,8 +80,8 @@ async def verify_admin_token(user_token: str) -> str:
 
     return user_id
 
+# 📥 Buscar usuários pendentes com respostas
 async def get_users_pending_approval() -> Dict[str, Any]:
-    """Obtém todos os usuários que ainda não foram aprovados e suas respostas de onboarding"""
     try:
         query_users = (
             f"{SUPABASE_URL}/rest/v1/User"
@@ -87,12 +96,10 @@ async def get_users_pending_approval() -> Dict[str, Any]:
         headers["Accept"] = "application/json; charset=utf-8"
 
         async with aiohttp.ClientSession() as session:
-            # Busca os usuários pendentes
             async with session.get(query_users, headers=headers) as response:
                 if response.status != 200:
                     logger.error(f"❌ Erro ao buscar usuários pendentes: {response.status}")
                     raise HTTPException(status_code=500, detail="Erro ao consultar usuários")
-
                 users = await response.json()
 
             if not users:
@@ -101,7 +108,6 @@ async def get_users_pending_approval() -> Dict[str, Any]:
             user_ids = [user['id'] for user in users]
             user_ids_str = ",".join(user_ids)
 
-            # Busca as respostas desses usuários
             query_answers = (
                 f"{SUPABASE_URL}/rest/v1/User answers"
                 f"?select=user_id,question_id,answers"
@@ -115,7 +121,6 @@ async def get_users_pending_approval() -> Dict[str, Any]:
                 else:
                     user_answers = await response.json()
 
-            # Busca as perguntas
             query_questions = f"{SUPABASE_URL}/rest/v1/Onboarding?select=id,title"
             async with session.get(query_questions, headers=headers) as response:
                 if response.status != 200:
@@ -124,10 +129,7 @@ async def get_users_pending_approval() -> Dict[str, Any]:
                 else:
                     questions = await response.json()
 
-        # Mapeia perguntas por ID
         question_map = {q["id"]: q["title"] for q in questions}
-
-        # Agrupa respostas por usuário
         grouped_answers = defaultdict(list)
 
         for answer in user_answers:
@@ -137,7 +139,6 @@ async def get_users_pending_approval() -> Dict[str, Any]:
                 "answer": answer.get("answers", [])
             })
 
-        # Enriquecer usuários com respostas
         for user in users:
             user["answers"] = grouped_answers.get(user["id"], [])
 
@@ -147,25 +148,20 @@ async def get_users_pending_approval() -> Dict[str, Any]:
         logger.error(f"❌ Erro ao buscar usuários e respostas: {str(e)}")
         raise HTTPException(status_code=500, detail="Erro interno do servidor")
 
-
+# ✅ Aprovar conta
 @router.post("/admin/approve-account")
 async def approve_account(
     body: ApproveAccountRequest,
     user_token: str = Header(None, alias="User-key")
 ):
-    """
-    Aprova a conta de um usuário.
-    """
     try:
         await verify_admin_token(user_token)
 
         update_url = f"{SUPABASE_URL}/rest/v1/User?id=eq.{body.user_id}"
-        payload = {
-            "approved_account": True
-        }
+        payload = { "approved_account": True }
 
         async with aiohttp.ClientSession() as session:
-            async with session.patch(update_url, headers=SUPABASE_HEADERS, json=payload) as response:
+            async with session.patch(update_url, headers=SUPABASE_ROLE_HEADERS, json=payload) as response:
                 if response.status != 204:
                     logger.error(f"❌ Erro ao aprovar conta: {response.status}")
                     raise HTTPException(status_code=500, detail="Erro ao aprovar a conta")
@@ -178,14 +174,12 @@ async def approve_account(
         logger.error(f"❌ Erro ao aprovar conta: {str(e)}")
         raise HTTPException(status_code=500, detail=str(e))
 
+# ❌ Reprovar conta
 @router.post("/admin/reject-account")
 async def reject_account(
     body: RejectAccountRequest,
     user_token: str = Header(None, alias="User-key")
 ):
-    """
-    Reprova a conta de um usuário, com motivo.
-    """
     try:
         await verify_admin_token(user_token)
 
@@ -196,7 +190,7 @@ async def reject_account(
         }
 
         async with aiohttp.ClientSession() as session:
-            async with session.patch(update_url, headers=SUPABASE_HEADERS, json=payload) as response:
+            async with session.patch(update_url, headers=SUPABASE_ROLE_HEADERS, json=payload) as response:
                 if response.status != 204:
                     logger.error(f"❌ Erro ao reprovar conta: {response.status}")
                     raise HTTPException(status_code=500, detail="Erro ao reprovar a conta")
@@ -209,14 +203,11 @@ async def reject_account(
         logger.error(f"❌ Erro ao reprovar conta: {str(e)}")
         raise HTTPException(status_code=500, detail=str(e))
 
+# 🔍 Listar contas pendentes
 @router.get("/admin/pending-approvals")
 async def pending_approvals_endpoint(
     user_token: str = Header(None, alias="User-key")
 ):
-    """
-    Endpoint para listar usuários que ainda não foram aprovados,
-    com respostas das perguntas de onboarding.
-    """
     try:
         await verify_admin_token(user_token)
         return await get_users_pending_approval()
@@ -224,4 +215,4 @@ async def pending_approvals_endpoint(
         raise he
     except Exception as e:
         logger.error(f"❌ Erro no endpoint de aprovações: {str(e)}")
-        raise HTTPException(status_code=500, detail=str(e))
+        raise HTTPException(status_code=500, detail=str(e))