SurveyVista/Web/Program.cs
2026-03-07 02:37:33 +01:00

131 lines
4 KiB
C#

using Data;
using Microsoft.AspNetCore.Authorization;
using Services.Implemnetation;
using Services.Interaces;
using Web.Authorization;
using Web.Extesions;
using Web.ViewComponents;
var builder = WebApplication.CreateBuilder(args);
// Add services to the container.
builder.Services.AddControllersWithViews();
builder.Services.AddHttpClient();
var config = builder.Configuration;
//builder.Services.AddDbContext<SurveyContext>(options =>
//{
// options.UseSqlServer(config.GetConnectionString("SurveyVista"), cfg => cfg.MigrationsAssembly("Web"));
//});
builder.Services.AddRazorPages();
builder.Services.ConfigureSQLConnection(config);
builder.Services.ConfigurePageServices();
builder.Services.ConfigureBannerServices();
builder.Services.ConfigureAddress();
builder.Services.ConfigureSocialMedia();
builder.Services.ConfigureFooter();
builder.Services.ConfigureQuestionnarie();
builder.Services.ConfigureQuestion();
builder.Services.AddScoped<SurveyContext>();
builder.Services.AddTransient<NavigationViewComponent>();
builder.Services.ConfigureNewsLetter();
builder.Services.MailConfiguration();
builder.Services.MailStatConfiguration();
builder.Services.ConfigureDashboard();
builder.Services.UserResponseConfiguration();
builder.Services.ConfigureOpenAI(config);
builder.Services.AddSignalR();
builder.Services.ConfigureAIAnalysis();
// Add permission-based authorization
builder.Services.AddSingleton<IAuthorizationPolicyProvider, PermissionPolicyProvider>();
builder.Services.AddScoped<IAuthorizationHandler, PermissionAuthorizationHandler>();
builder.Services.AddScoped<IUserTrajectoryService, UserTrajectoryService>();
builder.Services.AddCors(options =>
{
options.AddPolicy("AllowSeoSoft", policy =>
{
policy.WithOrigins("https://seosoft.dk", "https://unabused-terina-wavier.ngrok-free.dev")
.AllowAnyMethod()
.AllowAnyHeader();
});
});
builder.Services.ConfigureApplicationCookie(options =>
{
options.AccessDeniedPath = "/Admin/AccessDenied/Index";
options.Events.OnRedirectToAccessDenied = context =>
{
// For AJAX requests, return 403
if (context.Request.Headers["X-Requested-With"] == "XMLHttpRequest" ||
context.Request.Headers["Accept"].ToString().Contains("application/json"))
{
context.Response.StatusCode = 403;
return Task.CompletedTask;
}
// For normal requests, redirect back with ?accessDenied=true
var returnUrl = context.Request.Path + context.Request.QueryString;
var referer = context.Request.Headers["Referer"].ToString();
var redirectUrl = !string.IsNullOrEmpty(referer) ? referer : "/admin";
if (!redirectUrl.Contains("accessDenied=true"))
{
redirectUrl += (redirectUrl.Contains("?") ? "&" : "?") + "accessDenied=true";
}
context.Response.Redirect(redirectUrl);
return Task.CompletedTask;
};
});
var app = builder.Build();
// Configure the HTTP request pipeline.
if (!app.Environment.IsDevelopment())
{
app.UseExceptionHandler("/Home/Error");
// The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
app.UseHsts();
}
app.UseHttpsRedirection();
app.UseStaticFiles();
app.UseRouting();
app.UseAuthentication();
app.UseAuthorization();
app.MapRazorPages();
app.MapControllers();
app.UseCors("AllowSeoSoft");
app.MapControllerRoute(
name: "page",
pattern: "{slug}", defaults: new { Controller = "Home", Action = "Index" });
app.Use(async (context, next) =>
{
context.Request.EnableBuffering(); // Enable buffering for reading request body multiple times
await next.Invoke();
});
app.MapAreaControllerRoute(
name: "MyAdminArea",
areaName:"admin",
pattern: "admin/{controller=Home}/{action=Index}/{id?}");
app.MapControllerRoute(
name: "default",
pattern:"{controller=Home}/{action=Index}/{id?}");
app.MapHub<NotificationHub>("/notificationHub");
app.Run();