Add JWT auth, token service & Neutrino endpoint

API/Program.cs

@@ -1,7 +1,11 @@
+using System.Text;
 using API.Configurations;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.HttpOverrides;
+using Microsoft.IdentityModel.Tokens;
 using RecNet.Application;
 using RecNet.Infrastructure;
+using RecNet.Infrastructure.Services.Tokens;
 using RecNet.ServiceDefaults;
 
 namespace API;
@@ -11,12 +15,15 @@ public class Program
     public static void Main(string[] args)
     {
         var builder = WebApplication.CreateBuilder(args);
+
+        var recNetOptions = builder.Configuration.GetSection("RecNet").Get<RecNetOptions>()
+            ?? new RecNetOptions();
         
-        var recNetOptions = builder.Configuration.GetSection("RecNet").Get<RecNetConfiguration>()
-            ?? new RecNetConfiguration();
+        var jwtOptions = builder.Configuration.GetSection("Jwt").Get<JwtOptions>()
+            ?? new JwtOptions();
 
         builder.AddServiceDefaults();
-        
+
         builder.Services.Configure<ForwardedHeadersOptions>(options =>
         {
             options.ForwardedHeaders =
@@ -26,18 +33,37 @@ public class Program
             options.KnownIPNetworks.Clear();
             options.KnownProxies.Clear();
         });
-        
+
         builder.Services.AddApplication();
         builder.AddInfrastructure();
 
+        builder.Services
+            .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
+            .AddJwtBearer(options =>
+            {
+                options.TokenValidationParameters = new TokenValidationParameters
+                {
+                    ValidateIssuerSigningKey = true,
+                    IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtOptions.Secret)),
+                    ValidateIssuer = true,
+                    ValidIssuer = jwtOptions.Issuer,
+                    ValidateAudience = true,
+                    ValidAudience = jwtOptions.Audience,
+                    ValidateLifetime = true,
+                    ClockSkew = TimeSpan.FromMinutes(1)
+                };
+            });
+        
+        builder.Services.AddAuthorization();
+
         builder.Services.AddControllers();
 
         var app = builder.Build();
-        
+
         if (recNetOptions.UseForwardedHeaders)
             app.UseForwardedHeaders();
 
-        // app.UseAuthentication();
+        app.UseAuthentication();
         app.UseAuthorization();
 
         app.MapControllers();