Upload app/api/auth.py

app/api/auth.py

@@ -95,6 +95,35 @@ async def login(request: LoginRequest, db: Session = Depends(get_db)):
     )
 
 
+@router.post("/admin-login", response_model=AuthResponse)
+async def admin_login(request: LoginRequest, db: Session = Depends(get_db)):
+    user = db.query(User).filter(User.email == request.email).first()
+    
+    # Check general credentials
+    if not user or not user.password_hash or not verify_password(request.password, user.password_hash):
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Invalid email or password",
+        )
+        
+    # Crucial step: Verify admin role
+    if user.role != UserRole.ADMIN:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Access denied. Admin privileges required.",
+        )
+
+    tokens = _generate_tokens(user.id)
+    user_data = UserResponse.model_validate(user).model_dump()
+    user_data["created_at"] = user_data["created_at"].isoformat()
+
+    return AuthResponse(
+        isSuccess=True,
+        value={"tokens": tokens, "user": user_data},
+        statusCode=200,
+    )
+
+
 @router.post("/google", response_model=AuthResponse)
 async def google_login(request: GoogleLoginRequest, db: Session = Depends(get_db)):
     """Authenticate user with Google ID token."""