CodeLiturgy.Dashboard/BlueWest.Views/StartupExtensions.cs

using System.Text;
using BlueWest.Cryptography;
using BlueWest.Data.Application.Users;
using BlueWest.Data.Auth;
using BlueWest.Data.Auth.Context.Users;
using BlueWest.Domain;
using BlueWest.WebApi.Configuration;
using BlueWest.WebApi.Context.Users;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Identity;
using Microsoft.EntityFrameworkCore;
using Microsoft.IdentityModel.Tokens;
using Redis.OM;

namespace BlueWest.Views;

public static class StartupExtensions
{
    private static MySqlServerVersion GetMySqlServerVersion(int major, int minor, int build) => new (new Version(major, minor, build));


    private static BlueWestConnectionString GetConnectionString(this IConfigurationRoot configurationRoot)
    {
        // Docker / No-Docker
        var startupMode = configurationRoot["mode"];
            
        if (startupMode == "docker")
        {
            var config = configurationRoot.Get<ConnectionStringDocker>();
            return config;
        }
        else
        {
            var config = configurationRoot.Get<ConnectionStringNoDocker>();
            return config;
        }

        return null;
    }
            internal static IServiceCollection AddAuthServerServices(this IServiceCollection services,  IConfiguration configuration , IWebHostEnvironment environment, IConfigurationRoot configurationRoot)
        {

            var connectionString = configurationRoot.GetConnectionString();

            if (connectionString == null)
            {
                throw new InvalidOperationException("Redis connection string is empty");
            }

            services.AddDistributedRedisCache(options =>
            {
                options.Configuration = connectionString.Redis;

            });

            services
                .AddSingleton(new RedisConnectionProvider(connectionString.Redis))
                .AddScoped<IJwtTokenHandler, JwtTokenHandler>()
                .AddScoped<IJwtFactory, JwtFactory>()
                .AddHostedService<SessionManager>()
                .AddSingleton<ISessionCache, SessionManager>()
                .AddScoped<UserRepository>()
                .AddScoped<IUserManager, ApplicationUserManager>() 
                .AddScoped<IAuthManager, AuthManager>()
                .AddScoped<IHasher, Hasher>();
            
            // Database Context and Swagger


            // Register the ConfigurationBuilder instance of AuthSettings
            var authSettings = configuration.GetSection(nameof(AuthSettings));
            services.Configure<AuthSettings>(authSettings);
            var signingKey = new SymmetricSecurityKey
                (Encoding.ASCII.GetBytes(authSettings[nameof(AuthSettings.SecretKey)]));

            // jwt wire up
            // Get options from app settings
            var jwtAppSettingOptions = configuration
                .GetSection(nameof(JwtIssuerOptions));

            // Configure JwtIssuerOptions
            services.Configure<JwtIssuerOptions>(options =>
            {
                options.Issuer = jwtAppSettingOptions[nameof(JwtIssuerOptions.Issuer)];
                options.Audience = jwtAppSettingOptions[nameof(JwtIssuerOptions.Audience)];
                options.SigningCredentials = new SigningCredentials
                    (signingKey, SecurityAlgorithms.HmacSha256);
            });

            var tokenValidationParameters = new TokenValidationParameters
            {
                ValidateIssuer = true,
                ValidIssuer = jwtAppSettingOptions[nameof(JwtIssuerOptions.Issuer)],

                ValidateAudience = true,
                ValidAudience = jwtAppSettingOptions[nameof(JwtIssuerOptions.Audience)],

                ValidateIssuerSigningKey = true,
                IssuerSigningKey = signingKey,

                RequireExpirationTime = false,
                ValidateLifetime = true,
                ClockSkew = TimeSpan.Zero
            };

            services.AddAuthentication(options =>
                {
                    
                    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                    options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                    options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
                })
                .AddCookie(options =>
                {
                    options.LoginPath = "/";
                    options.LogoutPath = "/logout";
                })
                .AddJwtBearer(configureOptions =>
                {
                    configureOptions.ClaimsIssuer = jwtAppSettingOptions[nameof(JwtIssuerOptions.Issuer)];
                    configureOptions.TokenValidationParameters = tokenValidationParameters;
                    configureOptions.SaveToken = true;

                    configureOptions.Events = new JwtBearerEvents
                    {
                        OnAuthenticationFailed = context =>
                        {
                            if (context.Exception.GetType() == typeof(SecurityTokenExpiredException))
                            {
                                context.Response.Headers.Add("Token-Expired", "true");
                            }

                            return Task.CompletedTask;
                        },
                    };
                });
                

            // api user claim policy
            services.AddAuthorization(options =>
            {
                options.AddPolicy(SessionConstants.ApiNamePolicy,
                    policy => policy.RequireClaim(Data.Auth.Context.Users.Constants.JwtClaimIdentifiers.Rol, 
                        Data.Auth.Context.Users.Constants.JwtClaims.ApiAccess));
                
            });

            // add identity
            var identityBuilder = services.AddIdentityCore<ApplicationUser>(o =>
            {
                o.User.RequireUniqueEmail = true;
                
                // configure identity options
                o.Password.RequireDigit = false;
                o.Password.RequireLowercase = false;
                o.Password.RequireUppercase = false;
                o.Password.RequireNonAlphanumeric = false;
                o.Password.RequiredLength = 6;
            })
                .AddUserManager<ApplicationUserManager>()
                .AddUserStore<UserRepository>();

            identityBuilder = new IdentityBuilder(identityBuilder.UserType, typeof(ApplicationRole), identityBuilder.Services);
            identityBuilder
                .AddEntityFrameworkStores<ApplicationUserDbContext>()
                .AddDefaultTokenProviders();

            return services;
        }

  
            /// <summary>
            /// Get MYSQL Connection String
            /// </summary>
            /// <param name="optionsBuilder"></param>
            /// <param name="configuration"></param>
            /// <param name="environment"></param>
            private static DbContextOptionsBuilder GetMySqlSettings(
                this DbContextOptionsBuilder optionsBuilder,
                IConfiguration configuration,
                IConfigurationRoot configurationRoot,
                IWebHostEnvironment environment)
            {
                var sqlVersion = GetMySqlServerVersion(8, 0, 11);
            
                // Docker / No-Docker
            
                string mySqlConnectionString = configurationRoot.GetConnectionString().MySql;
            
                if (mySqlConnectionString == string.Empty)
                {
                    throw new InvalidOperationException("Fatal error: MySQL Connection string is empty.");
                }
            

                optionsBuilder
                    .UseMySql(
                        mySqlConnectionString, 
                        sqlVersion)
                    .UseMySql(sqlVersion,
                        builder =>
                        {
                            builder.EnableRetryOnFailure(6, TimeSpan.FromSeconds(3), null);
                        });

                // The following three options help with debugging, but should
                // be changed or removed for production.
                if (environment.IsDevelopment())
                {
                    optionsBuilder
                        .LogTo(Console.WriteLine, LogLevel.Information)
                        .EnableSensitiveDataLogging()
                        .EnableDetailedErrors();
                }

                return optionsBuilder;
            }

            /// <summary>
            /// Setup database Contexts
            /// </summary>
            /// <param name="serviceCollection"></param>
            /// <param name="configuration"></param>
            /// <param name="environment"></param>
            /// <returns></returns>
            public static IServiceCollection PrepareMySqlDatabasePool(this IServiceCollection serviceCollection,
                IConfiguration configuration, IWebHostEnvironment environment, IConfigurationRoot configurationRoot)
            {
                return serviceCollection
                    .AddDbContextPool<UserDbContext>(options =>
                        options.GetMySqlSettings(configuration, configurationRoot, environment))
                    .AddDbContextPool<CountryDbContext>(options =>
                        options.GetMySqlSettings(configuration, configurationRoot, environment))
                    .AddDbContextPool<FinanceDbContext>(options =>
                        options.GetMySqlSettings(configuration, configurationRoot, environment))
                    .AddDbContextPool<CompanyDbContext>(options =>
                        options.GetMySqlSettings(configuration, configurationRoot, environment))
                    .AddDbContextPool<ApplicationUserDbContext>(options =>
                        options.GetMySqlSettings(configuration, configurationRoot, environment));
            }


}