Add user delete process

shared/auth/jwt_handler.py

@@ -201,6 +201,43 @@ class JWTHandler:
 
         return None
     
+    def create_service_token(self, service_name: str, expires_delta: Optional[timedelta] = None) -> str:
+        """
+        Create JWT token for service-to-service communication
+
+        Args:
+            service_name: Name of the service (e.g., 'auth-service', 'tenant-service')
+            expires_delta: Optional expiration time (defaults to 365 days for services)
+
+        Returns:
+            Encoded JWT service token
+        """
+        to_encode = {
+            "sub": service_name,
+            "user_id": service_name,
+            "service": service_name,
+            "type": "service",
+            "is_service": True,
+            "role": "admin",  # Services have admin privileges
+            "email": f"{service_name}@internal.service"
+        }
+
+        # Set expiration (default to 1 year for service tokens)
+        if expires_delta:
+            expire = datetime.now(timezone.utc) + expires_delta
+        else:
+            expire = datetime.now(timezone.utc) + timedelta(days=365)
+
+        to_encode.update({
+            "exp": expire,
+            "iat": datetime.now(timezone.utc),
+            "iss": "bakery-auth"
+        })
+
+        encoded_jwt = jwt.encode(to_encode, self.secret_key, algorithm=self.algorithm)
+        logger.info(f"Created service token for {service_name}")
+        return encoded_jwt
+
     def get_token_info(self, token: str) -> Dict[str, Any]:
         """
         Get comprehensive token information for debugging
@@ -214,7 +251,7 @@ class JWTHandler:
             "exp": None,
             "iat": None
         }
-        
+
         try:
             # Try unsafe decode first
             payload = self.decode_token_no_verify(token)
@@ -227,12 +264,12 @@ class JWTHandler:
                     "iat": payload.get("iat"),
                     "expired": self.is_token_expired(token)
                 })
-                
+
                 # Try full verification
                 verified_payload = self.verify_token(token)
                 info["valid"] = verified_payload is not None
-        
+
         except Exception as e:
             logger.warning(f"Failed to get token info: {e}")
-        
+
         return info