changes

Webshop.Api/Program.cs

@@ -3,31 +3,32 @@ using Microsoft.AspNetCore.Identity;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.IdentityModel.Tokens;
 using System.Text;
-using Webshop.Application.Services;
+using Webshop.Application.Services.Public; // Produktkatalog Service (jetzt ProductService)
+using Webshop.Application.Services.Auth;    // Auth Services
+using Webshop.Application.Services.Admin;   // Admin Services
 using Webshop.Domain.Interfaces;
 using Webshop.Infrastructure.Data;
 using Webshop.Infrastructure.Repositories;
-
+using Microsoft.AspNetCore.HttpOverrides; // F<>r UseForwardedHeaders
+using Microsoft.Extensions.Logging; // F<>r ILogger
 
 var builder = WebApplication.CreateBuilder(args);
 
 // --- START: DIENSTE ZUM CONTAINER HINZUF<55>GEN ---
 
 // 1. Datenbank-Kontext (DbContext) registrieren
-// Sagt der Anwendung, wie sie sich mit der PostgreSQL-Datenbank verbinden soll.
 builder.Services.AddDbContext<ApplicationDbContext>(options =>
-    options.UseNpgsql(builder.Configuration.GetConnectionString("DefaultConnection")));
+    options.UseNpgsql(builder.Configuration.GetConnectionString("DefaultConnection"))
+);
 
 // 2. ASP.NET Core Identity f<>r Benutzerverwaltung registrieren
-// Verwendet unseren DbContext, um Benutzer- und Rollen-Daten zu speichern.
 builder.Services.AddIdentity<IdentityUser, IdentityRole>()
     .AddEntityFrameworkStores<ApplicationDbContext>()
     .AddDefaultTokenProviders();
 
 // 3. JWT-Authentifizierung konfigurieren
-// Richtet ein, wie die API die von Benutzern gesendeten Tokens validieren soll.
 var jwtSettings = builder.Configuration.GetSection("JwtSettings");
-var secretKey = jwtSettings["Secret"] ?? throw new InvalidOperationException("JWT Secret not found");
+var secretKey = jwtSettings["Secret"] ?? throw new InvalidOperationException("JWT Secret not found in configuration.");
 
 builder.Services.AddAuthentication(options =>
 {
@@ -47,14 +48,25 @@ builder.Services.AddAuthentication(options =>
         IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secretKey))
     };
 });
+builder.Services.AddAuthorization(); // Aktiviert die Autorisierung
 
 // 4. Unsere eigenen Interfaces und Klassen registrieren (Dependency Injection)
-// Sagt: "Immer wenn jemand nach 'IProductRepository' fragt, gib ihm eine neue 'ProductRepository'-Instanz."
 builder.Services.AddScoped<IProductRepository, ProductRepository>();
 
-# region Services
-builder.Services.AddScoped<ProductService>();
-# endregion
+// AUTH Services
+builder.Services.AddScoped<IAuthService, AuthService>();
+
+// PUBLIC Services
+builder.Services.AddScoped<ProductService>(); // Ihr ProductService ist hier registriert
+
+// ADMIN Services
+builder.Services.AddScoped<AdminUserService>();
+builder.Services.AddScoped<AdminProductService>();
+
+// CUSTOMER Services (sp<73>ter Implementierungen hinzuf<75>gen)
+// builder.Services.AddScoped<CustomerOrderService>();
+
+
 // 5. Controller und Swagger/OpenAPI hinzuf<75>gen
 builder.Services.AddControllers();
 builder.Services.AddEndpointsApiExplorer();
@@ -64,13 +76,14 @@ builder.Services.AddSwaggerGen();
 
 var app = builder.Build();
 
+// Optional: Automatisches Anwenden von Migrationen beim Start (nur f<>r Entwicklung/Tests)
 using (var scope = app.Services.CreateScope())
 {
     var services = scope.ServiceProvider;
     try
     {
         var context = services.GetRequiredService<ApplicationDbContext>();
-        context.Database.Migrate();
+        context.Database.Migrate(); // Wendet ausstehende Migrationen an
     }
     catch (Exception ex)
     {
@@ -83,25 +96,91 @@ using (var scope = app.Services.CreateScope())
 
 app.UseForwardedHeaders(new ForwardedHeadersOptions
 {
-    ForwardedHeaders = Microsoft.AspNetCore.HttpOverrides.ForwardedHeaders.XForwardedFor | Microsoft.AspNetCore.HttpOverrides.ForwardedHeaders.XForwardedProto
+    ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto
 });
 
-//if (app.Environment.IsDevelopment())
-//{
-    app.UseSwagger();
-    app.UseSwaggerUI();
-//}
+// Swagger immer aktivieren (auch in Produktion f<>r API-Dokumentation)
+// F<>r die Produktion w<>re es sicherer, dies an `app.Environment.IsDevelopment()` zu binden
+// if (app.Environment.IsDevelopment())
+// {
+app.UseSwagger();
+app.UseSwaggerUI();
+// }
 
-//app.UseHttpsRedirection();
+// app.UseHttpsRedirection(); // Auskommentiert f<>r Docker HTTP-Entwicklung
 
 // WICHTIG: Die Reihenfolge ist entscheidend!
-// Zuerst pr<70>fen, wer der Benutzer ist (Authentifizierung)...
 app.UseAuthentication();
-// ...dann pr<70>fen, was der Benutzer darf (Autorisierung).
 app.UseAuthorization();
 
 app.MapControllers();
 
 // --- ENDE: HTTP REQUEST PIPELINE KONFIGURIEREN ---
 
-app.Run();
+app.Run();
+
+// --- TEMPOR<4F>RER INITIALER ADMIN- UND KUNDEN-SETUP (NUR F<>R ERSTE ENTWICKLUNG!) ---
+// Dieser Block erstellt Rollen und initiale Benutzer, falls sie noch nicht existieren.
+// Entfernen oder kommentiere dies aus, NACHDEM du deine ersten Benutzer erstellt hast!
+using (var scope = app.Services.CreateScope()) // Eigener Scope, da app.Run() blockierend ist
+{
+    var serviceProvider = scope.ServiceProvider;
+    var roleManager = serviceProvider.GetRequiredService<RoleManager<IdentityRole>>();
+    var userManager = serviceProvider.GetRequiredService<UserManager<IdentityUser>>();
+
+    string[] roleNames = { "Admin", "Customer" };
+
+    foreach (var roleName in roleNames)
+    {
+        var roleExist = await roleManager.RoleExistsAsync(roleName);
+        if (!roleExist)
+        {
+            await roleManager.CreateAsync(new IdentityRole(roleName));
+        }
+    }
+
+    // Erstelle einen initialen Admin-Benutzer
+    var adminUser = await userManager.FindByEmailAsync("admin@yourwebshop.com"); // << ANPASSEN >>
+    if (adminUser == null)
+    {
+        adminUser = new IdentityUser
+        {
+            UserName = "admin@yourwebshop.com", // << ANPASSEN >>
+            Email = "admin@yourwebshop.com",    // << ANPASSEN >>
+            EmailConfirmed = true
+        };
+        var createAdmin = await userManager.CreateAsync(adminUser, "SecureAdminPass123!"); // << ANPASSEN >>
+        if (createAdmin.Succeeded)
+        {
+            await userManager.AddToRoleAsync(adminUser, "Admin");
+            Console.WriteLine("Admin user created.");
+        }
+        else
+        {
+            Console.WriteLine($"Error creating admin user: {string.Join(", ", createAdmin.Errors.Select(e => e.Description))}");
+        }
+    }
+
+    // Erstelle einen initialen Kunden-Benutzer
+    var customerUser = await userManager.FindByEmailAsync("customer@yourwebshop.com"); // << ANPASSEN >>
+    if (customerUser == null)
+    {
+        customerUser = new IdentityUser
+        {
+            UserName = "customer@yourwebshop.com", // << ANPASSEN >>
+            Email = "customer@yourwebshop.com",    // << ANPASSEN >>
+            EmailConfirmed = true
+        };
+        var createCustomer = await userManager.CreateAsync(customerUser, "SecureCustomerPass123!"); // << ANPASSEN >>
+        if (createCustomer.Succeeded)
+        {
+            await userManager.AddToRoleAsync(customerUser, "Customer");
+            Console.WriteLine("Customer user created.");
+        }
+        else
+        {
+            Console.WriteLine($"Error creating customer user: {string.Join(", ", createCustomer.Errors.Select(e => e.Description))}");
+        }
+    }
+}
+// --- ENDE DES TEMPOR<4F>REN SETUP-BLOCKS ---