Adding Flags API

src/api/MicCheck.Api/Program.cs

@@ -2,10 +2,23 @@ using System.Text;
 using System.Threading.RateLimiting;
 using FluentValidation;
 using FluentValidation.AspNetCore;
-using Microsoft.AspNetCore.Authentication.JwtBearer;
-using Microsoft.AspNetCore.RateLimiting;
-using Microsoft.IdentityModel.Tokens;
+using MicCheck.Api.ApiKeys;
 using MicCheck.Api.Auth;
+using MicCheck.Api.Authentication;
+using MicCheck.Api.Authorization;
+using MicCheck.Api.Data;
+using MicCheck.Api.Environments;
+using MicCheck.Api.Features;
+using MicCheck.Api.Identities;
+using MicCheck.Api.Segments;
+using MicCheck.Api.Users;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.RateLimiting;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.IdentityModel.Tokens;
 using Scalar.AspNetCore;
 using Serilog;
 
@@ -25,8 +38,12 @@ try
     builder.Services.AddOpenApi();
     builder.Services.AddControllers();
 
-    builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
-        .AddJwtBearer(options =>
+    builder.Services.AddAuthentication()
+        .AddScheme<AuthenticationSchemeOptions, EnvironmentKeyAuthenticationHandler>(
+            EnvironmentKeyAuthenticationHandler.SchemeName, _ => { })
+        .AddScheme<AuthenticationSchemeOptions, ApiKeyAuthenticationHandler>(
+            ApiKeyAuthenticationHandler.SchemeName, _ => { })
+        .AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, options =>
         {
             options.TokenValidationParameters = new TokenValidationParameters
             {
@@ -40,7 +57,22 @@ try
             };
         });
 
-    builder.Services.AddAuthorization();
+    builder.Services.AddAuthorization(options =>
+    {
+        options.AddPolicy(AuthorizationPolicies.FlagsApiAccess, policy =>
+            policy.AddAuthenticationSchemes(EnvironmentKeyAuthenticationHandler.SchemeName)
+                  .RequireClaim("EnvironmentId"));
+
+        options.AddPolicy(AuthorizationPolicies.AdminApiAccess, policy =>
+            policy.AddAuthenticationSchemes(ApiKeyAuthenticationHandler.SchemeName, JwtBearerDefaults.AuthenticationScheme)
+                  .RequireAuthenticatedUser());
+
+        options.AddPolicy(AuthorizationPolicies.OrganizationAdmin, policy =>
+            policy.AddAuthenticationSchemes(ApiKeyAuthenticationHandler.SchemeName, JwtBearerDefaults.AuthenticationScheme)
+                  .RequireClaim("OrganizationRole", "Admin"));
+    });
+
+    builder.Services.AddHttpContextAccessor();
 
     builder.Services.AddRateLimiter(options =>
         options.AddFixedWindowLimiter("AdminApi", limiter =>
@@ -54,7 +86,26 @@ try
     builder.Services.AddFluentValidationAutoValidation();
     builder.Services.AddValidatorsFromAssemblyContaining<Program>();
 
+    builder.Services.AddMemoryCache();
+
     builder.Services.AddScoped<ITokenService, TokenService>();
+    builder.Services.AddScoped<AuthService>();
+    builder.Services.AddScoped<ApiKeyService>();
+    builder.Services.AddScoped<DatabaseSeeder>();
+    builder.Services.AddScoped<IPasswordHasher<User>, PasswordHasher<User>>();
+    builder.Services.AddScoped<IAuthorizationHandler, ProjectPermissionRequirementHandler>();
+    builder.Services.AddScoped<FeatureEvaluationService>();
+    builder.Services.AddScoped<IdentityResolutionService>();
+    builder.Services.AddScoped<EnvironmentDocumentService>();
+    builder.Services.AddSingleton<SegmentEvaluator>();
+    builder.Services.AddSingleton<FlagCache>();
+
+    var connectionString = System.Environment.GetEnvironmentVariable("DATABASE_URL") is { } databaseUrl
+        ? DatabaseUrlParser.ToNpgsqlConnectionString(databaseUrl)
+        : builder.Configuration.GetConnectionString("DefaultConnection")!;
+
+    builder.Services.AddDbContext<MicCheckDbContext>(options =>
+        options.UseNpgsql(connectionString));
 
     var app = builder.Build();
 
@@ -62,6 +113,10 @@ try
     {
         app.MapOpenApi();
         app.MapScalarApiReference();
+
+        using var scope = app.Services.CreateScope();
+        var seeder = scope.ServiceProvider.GetRequiredService<DatabaseSeeder>();
+        await seeder.SeedAsync();
     }
 
     app.UseSerilogRequestLogging();
@@ -71,6 +126,7 @@ try
 
     app.MapControllers();
     app.MapAuthEndpoints();
+    app.MapApiKeyEndpoints();
 
     app.Run();
 }