Start integrating the onboarding flow with backend 3

services/orders/app/api/orders.py

@@ -12,7 +12,7 @@ from fastapi import APIRouter, Depends, HTTPException, Path, Query, status
 from fastapi.responses import JSONResponse
 import structlog
 
-from shared.auth.decorators import get_current_user_dep, get_current_tenant_id_dep
+from shared.auth.decorators import get_current_user_dep
 from app.core.database import get_db
 from app.services.orders_service import OrdersService
 from app.schemas.order_schemas import (
@@ -65,19 +65,12 @@ async def get_orders_service(db = Depends(get_db)) -> OrdersService:
 @router.get("/tenants/{tenant_id}/orders/dashboard-summary", response_model=OrdersDashboardSummary)
 async def get_dashboard_summary(
     tenant_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Get comprehensive dashboard summary for orders"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         summary = await orders_service.get_dashboard_summary(db, tenant_id)
         
         logger.info("Dashboard summary retrieved", 
@@ -100,19 +93,12 @@ async def get_dashboard_summary(
 async def get_demand_requirements(
     tenant_id: UUID = Path(...),
     target_date: date = Query(..., description="Date for demand analysis"),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Get demand requirements for production planning"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         requirements = await orders_service.get_demand_requirements(db, tenant_id, target_date)
         
         logger.info("Demand requirements calculated", 
@@ -138,19 +124,12 @@ async def get_demand_requirements(
 async def create_order(
     order_data: OrderCreate,
     tenant_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Create a new customer order"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         # Ensure tenant_id matches
         order_data.tenant_id = tenant_id
         
@@ -184,19 +163,12 @@ async def create_order(
 async def get_order(
     tenant_id: UUID = Path(...),
     order_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Get order details with items"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         order = await orders_service.get_order_with_items(db, order_id, tenant_id)
         if not order:
             raise HTTPException(
@@ -226,19 +198,12 @@ async def get_orders(
     end_date: Optional[date] = Query(None, description="End date for date range filter"),
     skip: int = Query(0, ge=0, description="Number of orders to skip"),
     limit: int = Query(100, ge=1, le=1000, description="Number of orders to return"),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Get orders with filtering and pagination"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         # Determine which repository method to use based on filters
         if status_filter:
             orders = await orders_service.order_repo.get_orders_by_status(
@@ -269,19 +234,12 @@ async def update_order_status(
     tenant_id: UUID = Path(...),
     order_id: UUID = Path(...),
     reason: Optional[str] = Query(None, description="Reason for status change"),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Update order status"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         # Validate status
         valid_statuses = ["pending", "confirmed", "in_production", "ready", "out_for_delivery", "delivered", "cancelled", "failed"]
         if new_status not in valid_statuses:
@@ -329,19 +287,12 @@ async def update_order_status(
 async def create_customer(
     customer_data: CustomerCreate,
     tenant_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Create a new customer"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         # Ensure tenant_id matches
         customer_data.tenant_id = tenant_id
         
@@ -383,19 +334,12 @@ async def get_customers(
     active_only: bool = Query(True, description="Filter for active customers only"),
     skip: int = Query(0, ge=0, description="Number of customers to skip"),
     limit: int = Query(100, ge=1, le=1000, description="Number of customers to return"),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Get customers with filtering and pagination"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         if active_only:
             customers = await orders_service.customer_repo.get_active_customers(
                 db, tenant_id, skip, limit
@@ -419,19 +363,12 @@ async def get_customers(
 async def get_customer(
     tenant_id: UUID = Path(...),
     customer_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Get customer details"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         customer = await orders_service.customer_repo.get(db, customer_id, tenant_id)
         if not customer:
             raise HTTPException(
@@ -458,19 +395,12 @@ async def get_customer(
 @router.get("/tenants/{tenant_id}/orders/business-model")
 async def detect_business_model(
     tenant_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep),
     orders_service: OrdersService = Depends(get_orders_service),
     db = Depends(get_db)
 ):
     """Detect business model based on order patterns"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         business_model = await orders_service.detect_business_model(db, tenant_id)
         
         return {
@@ -492,17 +422,10 @@ async def detect_business_model(
 @router.get("/tenants/{tenant_id}/orders/status")
 async def get_service_status(
     tenant_id: UUID = Path(...),
-    current_tenant: str = Depends(get_current_tenant_id_dep),
     current_user: dict = Depends(get_current_user_dep)
 ):
     """Get orders service status"""
     try:
-        if str(tenant_id) != current_tenant:
-            raise HTTPException(
-                status_code=status.HTTP_403_FORBIDDEN,
-                detail="Access denied to tenant data"
-            )
-        
         return {
             "service": "orders-service",
             "status": "healthy",