90ac0b81d1
Add full V2 architecture: identity, content, studio (.NET 10) and file, render, notification, gateway (Go) services with vendored deps, plus DB migrations, event/API contracts, and an init-db script. Wire the Next.js frontend to the gateway: server-side JWT auth routes (login/register/refresh/logout/me), gateway fetch helper, and session/ cookie/jwt helpers under src/lib. Containerize the stack via docker-compose.v2.yml and per-service Dockerfiles. Base images resolve through a Nexus mirror (Docker Hub) and MCR directly; npm/NuGet pull from Nexus groups. Self-host fonts via next/font/local to avoid Google Fonts (geo-blocked). Add CI workflow and ignore .env.v2, *.stackdump, and .NET bin/obj. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
128 lines
5.3 KiB
C#
128 lines
5.3 KiB
C#
using System.Text;
|
|
using FlatRender.ContentSvc.Application.Services;
|
|
using FlatRender.ContentSvc.Domain.Enums;
|
|
using FlatRender.ContentSvc.Infrastructure.Data;
|
|
using FlatRender.ContentSvc.Middleware;
|
|
using Microsoft.AspNetCore.Authentication.JwtBearer;
|
|
using Microsoft.AspNetCore.Diagnostics.HealthChecks;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using Microsoft.Extensions.Diagnostics.HealthChecks;
|
|
using Microsoft.IdentityModel.Tokens;
|
|
using Microsoft.OpenApi.Models;
|
|
using Npgsql;
|
|
|
|
var builder = WebApplication.CreateBuilder(args);
|
|
|
|
// ── Database ──────────────────────────────────────────────────────────────────
|
|
// Native PostgreSQL enums are mapped on the EF provider so Npgsql can read/write
|
|
// them at runtime (HasPostgresEnum in the model alone is not enough on Npgsql 8+).
|
|
// PG labels match the C# enum member names exactly, so preserve case verbatim.
|
|
var enumTr = PreserveCaseNameTranslator.Instance;
|
|
builder.Services.AddDbContext<ContentDbContext>(options =>
|
|
options.UseNpgsql(
|
|
builder.Configuration.GetConnectionString("Postgres"),
|
|
npgsql =>
|
|
{
|
|
npgsql.MapEnum<ChooseMode>("choose_mode", "content", enumTr);
|
|
npgsql.MapEnum<ResolutionKind>("resolution_kind", "content", enumTr);
|
|
npgsql.MapEnum<SceneKind>("scene_kind", "content", enumTr);
|
|
npgsql.MapEnum<ContentElementType>("content_element_type", "content", enumTr);
|
|
npgsql.MapEnum<JustifyKind>("justify_kind", "content", enumTr);
|
|
npgsql.MapEnum<AiInputType>("ai_input_type", "content", enumTr);
|
|
npgsql.MapEnum<RepeatSortStrategy>("repeat_sort_strategy", "content", enumTr);
|
|
npgsql.MapEnum<AttrValueKind>("attr_value_kind", "content", enumTr);
|
|
npgsql.MapEnum<BlogKind>("blog_kind", "content", enumTr);
|
|
npgsql.MapEnum<SlideType>("slide_type", "content", enumTr);
|
|
})
|
|
.UseSnakeCaseNamingConvention());
|
|
|
|
// ── JWT Auth ──────────────────────────────────────────────────────────────────
|
|
|
|
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
|
|
.AddJwtBearer(options =>
|
|
{
|
|
options.TokenValidationParameters = new TokenValidationParameters
|
|
{
|
|
ValidateIssuer = true,
|
|
ValidateAudience = true,
|
|
ValidateLifetime = true,
|
|
ValidateIssuerSigningKey = true,
|
|
ValidIssuer = builder.Configuration["Jwt:Issuer"],
|
|
ValidAudience = builder.Configuration["Jwt:Audience"],
|
|
IssuerSigningKey = new SymmetricSecurityKey(
|
|
Encoding.UTF8.GetBytes(builder.Configuration["Jwt:Secret"]!))
|
|
};
|
|
});
|
|
|
|
builder.Services.AddAuthorization();
|
|
|
|
// ── Application Services ──────────────────────────────────────────────────────
|
|
|
|
builder.Services.AddScoped<TaxonomyService>();
|
|
builder.Services.AddScoped<TemplateService>();
|
|
builder.Services.AddScoped<CmsService>();
|
|
|
|
// ── HTTP ──────────────────────────────────────────────────────────────────────
|
|
|
|
builder.Services.AddRouting(opts =>
|
|
{
|
|
opts.LowercaseUrls = true;
|
|
opts.AppendTrailingSlash = false; // prevent 301 redirects from gateway calls
|
|
});
|
|
|
|
builder.Services.AddControllers()
|
|
.AddJsonOptions(opts =>
|
|
{
|
|
opts.JsonSerializerOptions.PropertyNamingPolicy = System.Text.Json.JsonNamingPolicy.SnakeCaseLower;
|
|
});
|
|
|
|
builder.Services.AddEndpointsApiExplorer();
|
|
builder.Services.AddSwaggerGen(c =>
|
|
{
|
|
c.SwaggerDoc("v1", new OpenApiInfo { Title = "FlatRender Content API", Version = "v1" });
|
|
c.AddSecurityDefinition("Bearer", new OpenApiSecurityScheme
|
|
{
|
|
Type = SecuritySchemeType.Http,
|
|
Scheme = "bearer",
|
|
BearerFormat = "JWT",
|
|
Description = "JWT Bearer token"
|
|
});
|
|
c.AddSecurityRequirement(new OpenApiSecurityRequirement
|
|
{
|
|
{
|
|
new OpenApiSecurityScheme { Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "Bearer" } },
|
|
Array.Empty<string>()
|
|
}
|
|
});
|
|
});
|
|
|
|
builder.Services.AddHealthChecks()
|
|
.AddCheck("db", () => HealthCheckResult.Healthy());
|
|
|
|
builder.Services.AddCors(opts => opts.AddDefaultPolicy(p =>
|
|
p.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()));
|
|
|
|
// ── Build ─────────────────────────────────────────────────────────────────────
|
|
|
|
var app = builder.Build();
|
|
|
|
app.UseMiddleware<ExceptionMiddleware>();
|
|
|
|
if (app.Environment.IsDevelopment())
|
|
{
|
|
app.UseSwagger();
|
|
app.UseSwaggerUI();
|
|
|
|
using var scope = app.Services.CreateScope();
|
|
var db = scope.ServiceProvider.GetRequiredService<ContentDbContext>();
|
|
db.Database.Migrate();
|
|
}
|
|
|
|
app.UseCors();
|
|
app.UseAuthentication();
|
|
app.UseAuthorization();
|
|
app.MapControllers();
|
|
app.MapHealthChecks("/health", new HealthCheckOptions { AllowCachingResponses = false });
|
|
|
|
app.Run();
|