Multitenancy

backend/app/api/v1/tenants.py

@@ -1,36 +1,44 @@
 """
 Router tenant – gestione organizzazioni (solo super_admin).
 
+Protezione doppia:
+  1. require_super_admin  – JWT con ruolo super_admin
+  2. verify_admin_key     – Header X-Admin-Key (se configurata in produzione)
+
 Endpoint:
-  GET    /api/v1/tenants            → lista tenant
+  GET    /api/v1/tenants            → lista tenant con statistiche
   POST   /api/v1/tenants            → crea tenant + admin
-  GET    /api/v1/tenants/{id}       → dettaglio tenant
-  PATCH  /api/v1/tenants/{id}       → modifica tenant
+  GET    /api/v1/tenants/{id}       → dettaglio tenant con statistiche
+  PATCH  /api/v1/tenants/{id}       → modifica tenant (incluso is_active per sospensione)
 """
 
 import uuid
+from typing import Annotated
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 
-from app.dependencies import SuperAdminUser, DB
+from app.dependencies import DB, SuperAdminUser, verify_admin_key
 from app.schemas.tenant import TenantCreateRequest, TenantResponse, TenantUpdateRequest
 from app.services.tenant_service import TenantService
 
-router = APIRouter(prefix="/tenants", tags=["Tenant (super-admin)"])
+router = APIRouter(
+    prefix="/tenants",
+    tags=["Tenant (super-admin)"],
+    dependencies=[Depends(verify_admin_key)],  # X-Admin-Key su tutti gli endpoint
+)
 
 
 @router.get(
     "",
     response_model=list[TenantResponse],
-    summary="Lista tutti i tenant",
+    summary="Lista tutti i tenant con statistiche",
 )
 async def list_tenants(
     _: SuperAdminUser,
     db: DB,
 ) -> list[TenantResponse]:
     service = TenantService(db)
-    tenants = await service.list_tenants()
-    return [TenantResponse.model_validate(t) for t in tenants]
+    return await service.list_tenants_with_stats()
 
 
 @router.post(
@@ -52,7 +60,7 @@ async def create_tenant(
 @router.get(
     "/{tenant_id}",
     response_model=TenantResponse,
-    summary="Dettaglio tenant",
+    summary="Dettaglio tenant con statistiche",
 )
 async def get_tenant(
     tenant_id: uuid.UUID,
@@ -60,14 +68,13 @@ async def get_tenant(
     db: DB,
 ) -> TenantResponse:
     service = TenantService(db)
-    tenant = await service.get_tenant(tenant_id)
-    return TenantResponse.model_validate(tenant)
+    return await service.get_tenant_with_stats(tenant_id)
 
 
 @router.patch(
     "/{tenant_id}",
     response_model=TenantResponse,
-    summary="Modifica tenant",
+    summary="Modifica tenant (nome, piano, limiti, sospensione)",
 )
 async def update_tenant(
     tenant_id: uuid.UUID,