Add Super Admin login flag and expose web tenant onboarding

issuperadmin on app_users (schema change already applied to the DB)
is now returned by AppLogin/TenantWebLogin's login response, gated
server-side rather than via a client-supplied roleid. Fixes the login
enrichment query (GetTenantUserById) to LEFT JOIN app_location instead
of INNER JOIN — a tenantless super-admin row was previously silently
dropped, so the login "succeeded" but returned an empty struct.

Also exposes createtenantuser on the web route group (was mob-only).
No repository changes were needed for location auto-provisioning:
GORM was already inserting the nested tenantlocations association on
tenant creation, it just wasn't reachable from the web.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

models/users.go

@@ -59,6 +59,7 @@ type User struct {
 	Applocationid int    `json:"applocationid"`
 	Status        string `json:"status"`
 	Shiftid       int    `json:"shiftid"`
+	Issuperadmin  bool   `json:"issuperadmin"`
 }
 
 type TenantUserInfo struct {
@@ -99,4 +100,5 @@ type TenantUserInfo struct {
 	Categoryid     int    `json:"categoryid"`
 	Categoryname   string `json:"categoryname"`
 	Subcategoryid  int    `json:"subcategoryid"`
+	Issuperadmin   bool   `json:"issuperadmin"`
 }

repositories/userRepository.go

@@ -213,17 +213,22 @@ func (r *userRepository) UpdateFCMToken(userid int, token string) error {
 func (r *userRepository) GetTenantUserById(userid int) models.TenantUserInfo {
 	var info models.TenantUserInfo
 
+	// app_location is LEFT JOINed (not INNER) so a user with no matching
+	// tenant/applocation row — e.g. a super admin, tenantid=0 — still comes
+	// back with their own fields (issuperadmin included) instead of the
+	// whole query silently returning zero rows.
 	query := `
 		SELECT a.userid,a.authname,a.email,a.configid,a.roleid,a.authmode,a.contactno,
 			a.firstname,a.lastname,concat(a.firstname,' ',a.lastname) as fullname,
 			a.userfcmtoken,a.pin,a.deviceid,a.devicetype,a.tenantid,a.locationid,a.applocationid,
+			a.issuperadmin,
 			b.partnerid,b.moduleid,b.categoryid as categoryid,b.subcategoryid as subcategoryid,
 			b.applocationid,b.tenantname,b.address as tenantaddress,b.state as tenantstate,b.city as tenantcity,
 			b.postcode as tenantpostcode,b.latitude as tenantlat,b.longitude as tenantlong,c.locationname AS applocation,
 			c.latitude as applatitude,c.longitude as applongitude,c.radius as appradius, d.categoryname, e.locationname
 			from app_users a
 			LEFT JOIN tenants b ON a.tenantid=b.tenantid
-			INNER JOIN app_location c on c.applocationid=b.applocationid
+			LEFT JOIN app_location c on c.applocationid=b.applocationid
 			LEFT JOIN app_category d ON b.categoryid=d.categoryid
 			LEFT JOIN tenantlocations e ON a.locationid=e.locationid
 		WHERE a.userid = ?

routes/tenantroutes.go

@@ -20,6 +20,7 @@ func RegisterTenantRoutes(api fiber.Router, f *facade.Facade) {
 	tenant.Delete("/deletelocation", f.TenantController.DeleteLocation)
 	tenant.Post("/createtenantlocation", f.TenantController.CreateTenantLocation)
 	tenant.Put("/updatetenantlocation", f.TenantController.UpdateTenantLocation)
+	tenant.Post("/createtenantuser", f.TenantController.CreateTenantUser)
 
 	tenant = api.Group("/v1/mob/tenants")