# views_misc.py
from rest_framework.decorators import api_view, permission_classes
from rest_framework.permissions import IsAuthenticated
from rest_framework.response import Response

@api_view(["GET"])
@permission_classes([IsAuthenticated])
def whoami(request):
    u = request.user
    return Response({
        "id": u.id,
        "mobile_number": getattr(u, "mobile_number", None),
        "email": u.email,
        "role": getattr(u, "role", None),
        "is_staff": u.is_staff,
        "is_superuser": u.is_superuser,
    })