fix(bff): agregar endpoint /settings/demo-mode y proxy /api/v1 en Express Node.js y Flask API

backend/app/routes/api/admin.py

@@ -1941,6 +1941,77 @@ def update_auth_providers():
     }), 200
 
 
+@api_admin_bp.route('/settings/demo-mode', methods=['GET', 'POST'])
+@jwt_required
+def toggle_demo_mode_api():
+    """Habilita o deshabilita el Acceso Rápido Demo y las cuentas default (Bedelía, Docente, Alumno) vía API REST"""
+    from app.models.setting import SystemSetting
+    from app.models.user import User
+    from app.models.audit_log import AuditLog
+    from sqlalchemy import func
+
+    acting_user = getattr(g, 'jwt_user', None)
+    if not (acting_user and (acting_user.is_admin() or getattr(acting_user, 'role', '').upper() == 'ADMIN')):
+        return jsonify({'error': 'Forbidden', 'message': 'Solo administradores pueden modificar el modo demo.'}), 403
+
+    demo_emails = ['bedelia@edu-space.com', 'docente@edu-space.com', 'alumno@edu-space.com']
+
+    if request.method == 'GET':
+        demo_access_enabled = SystemSetting.get_value('demo_access_enabled', 'true') in ['true', 'True', '1', True]
+        demo_users = User.query.filter(func.lower(User.email).in_(demo_emails)).all()
+        demo_accounts_active = any(u.is_active for u in demo_users)
+        return jsonify({
+            'status': 'success',
+            'demo_access_enabled': demo_access_enabled,
+            'demo_accounts_active': demo_accounts_active
+        }), 200
+
+    data = request.get_json(silent=True) or request.form.to_dict() or {}
+    if 'enabled' in data:
+        target_state = data['enabled'] in [True, 'true', '1', 'on']
+    else:
+        current_state = SystemSetting.get_value('demo_access_enabled', 'true') in ['true', 'True', '1', True]
+        target_state = not current_state
+
+    SystemSetting.set_value(
+        'demo_access_enabled',
+        'true' if target_state else 'false',
+        'Acceso Rápido Demo en pantalla de Login',
+        category='security'
+    )
+
+    demo_users = User.query.filter(func.lower(User.email).in_(demo_emails)).all()
+    for u in demo_users:
+        u.is_active = target_state
+    db.session.commit()
+
+    action_name = 'ENABLE_DEMO_ACCOUNTS' if target_state else 'DISABLE_DEMO_ACCOUNTS'
+    msg_detail = (
+        'Acceso Rápido Demo habilitado y cuentas Bedelía, Docente y Alumno activadas'
+        if target_state else
+        'Acceso Rápido Demo deshabilitado y cuentas default (Bedelía, Docente, Alumno) desactivadas'
+    )
+    try:
+        audit = AuditLog(
+            user_id=acting_user.id,
+            user_email=acting_user.email,
+            action=action_name,
+            module='settings',
+            details=msg_detail
+        )
+        db.session.add(audit)
+        db.session.commit()
+    except Exception:
+        pass
+
+    return jsonify({
+        'status': 'success',
+        'message': msg_detail,
+        'demo_access_enabled': target_state,
+        'demo_accounts_active': target_state
+    }), 200
+
+
 @api_admin_bp.route('/settings/google-oauth', methods=['POST'])
 @jwt_required
 def update_google_oauth_settings():

backend/app/routes/api/auth.py

@@ -37,6 +37,7 @@ def get_auth_providers():
     google_val = SystemSetting.get_value('auth_google_enabled', 'false').lower() in ('true', '1')
     moodle_val = SystemSetting.get_value('auth_moodle_enabled', 'false').lower() in ('true', '1')
     google_client_id = SystemSetting.get_value('google_client_id', '')
+    demo_access_enabled = SystemSetting.get_value('demo_access_enabled', 'true').lower() in ('true', '1')
 
     return jsonify({
         'status': 'success',
@@ -45,7 +46,8 @@ def get_auth_providers():
             'google': google_val,
             'moodle': moodle_val
         },
-        'google_client_id': google_client_id
+        'google_client_id': google_client_id,
+        'demo_access_enabled': demo_access_enabled
     }), 200