Update admin_api.py

routes/admin_api.py

@@ -1,4 +1,4 @@
-from flask import Blueprint, jsonify, request, current_app, make_response
+from flask import Blueprint, jsonify, request, current_app, make_response, flash, redirect, url_for
 from functools import wraps
 from models import (
     KeyValueSettings, User, Room, Conversation, RoomFile,
@@ -10,6 +10,7 @@ import os
 import jwt
 from werkzeug.security import generate_password_hash
 import secrets
+from flask_login import login_user
 
 admin_api = Blueprint('admin_api', __name__)
 
@@ -73,20 +74,36 @@ def validate_management_api_key(api_key):
 @admin_api.route('/login', methods=['POST'])
 def admin_login():
     try:
+        # Check if this is an API request
+        is_api_request = request.headers.get('Accept') == 'application/json' or \
+                        request.headers.get('Content-Type') == 'application/json'
+
+        if is_api_request:
             data = request.get_json()
+        else:
+            data = request.form
+
         if not data or 'email' not in data or 'password' not in data:
+            if is_api_request:
                 return jsonify({
                     'message': 'Email and password are required',
                     'status': 'error'
                 }), 400
+            flash('Email and password are required', 'error')
+            return redirect(url_for('auth.login'))
 
         user = User.query.filter_by(email=data['email']).first()
         if not user or not user.is_admin or not user.check_password(data['password']):
+            if is_api_request:
                 return jsonify({
                     'message': 'Invalid credentials or not an admin',
                     'status': 'error'
                 }), 401
+            flash('Invalid credentials or not an admin', 'error')
+            return redirect(url_for('auth.login'))
 
+        # For API requests, return JWT token
+        if is_api_request:
             token = jwt.encode({
                 'user_id': user.id,
                 'is_admin': True,
@@ -98,12 +115,19 @@ def admin_login():
                 'status': 'success'
             }), 200
 
+        # For web requests, use session-based auth
+        login_user(user)
+        return redirect(url_for('main.dashboard'))
+
     except Exception as e:
         current_app.logger.error(f"Login error: {str(e)}")
+        if is_api_request:
             return jsonify({
                 'message': 'An error occurred during login',
                 'status': 'error'
             }), 500
+        flash('An error occurred during login', 'error')
+        return redirect(url_for('auth.login'))
 
 @admin_api.route('/management-token', methods=['POST'])
 def get_management_token():