Identity Service

using Identity.Infrastructure;
using Identity.Web;
using ServiceDefaults;
using Wolverine.RabbitMQ;

WebApplicationBuilder builder = WebApplication.CreateBuilder(args);

builder.AddServiceDefaults();

// Add database contexts
builder.Services.AddAuthDatabase(builder.Configuration);
builder.Services.AddUsersReadDatabase(builder.Configuration);

// Configure OpenIddict
builder.Services.AddOpenIddictCore();
builder.Services.AddOpenIddictServer(builder.Configuration);

// Add authentication using OpenIddict validation
builder.Services.AddAuthentication(options =>
    options.DefaultScheme = OpenIddict.Validation.AspNetCore
        .OpenIddictValidationAspNetCoreDefaults.AuthenticationScheme);
builder.Services.AddAuthorization();

// Configure Wolverine with RabbitMQ
await builder.UseWolverineWithRabbitMqAsync(opts =>
{
    opts.PublishAllMessages()
        .ToRabbitExchange(Components.RabbitMQConfig.ExchangeName);
    opts.ApplicationAssembly = typeof(Program).Assembly;
});

builder.Services.AddMediator(options => 
    options.ServiceLifetime = ServiceLifetime.Scoped);
builder.Services.AddValidatorsFromAssemblyContaining<Program>();

WebApplication app = builder.Build();

app.UseAuthentication();
app.UseAuthorization();

// Map endpoints
app.MapAuthEndpoints();
app.MapTokenEndpoint();

await app.RunAsync();

private static async Task<IResult> HandleOtpGrant(
    OpenIddictRequest request,
    IOtpService otpService,
    IUserPhoneResolver phoneResolver,
    IMessageBus messageBus)
{
    var phoneNumber = request.GetParameter("phone_number")?.ToString();
    var otpCode = request.GetParameter("otp_code")?.ToString();
    var userType = request.GetParameter("user_type")?.ToString();

    // Validate parameters
    if (string.IsNullOrEmpty(phoneNumber) || 
        string.IsNullOrEmpty(otpCode) || 
        string.IsNullOrEmpty(userType))
    {
        return ForbidWithError(
            Errors.InvalidRequest, 
            "رقم الهاتف، رمز التحقق ونوع المستخدم مطلوبة"
        );
    }

    // Verify OTP code
    var otpResult = await otpService.VerifyOtpAsync(phoneNumber, otpCode);
    if (otpResult.Status != ResultStatus.Ok)
    {
        return ForbidWithError(
            Errors.InvalidGrant, 
            string.Join("; ", otpResult.Errors)
        );
    }

    // Publish UserAuthenticatedEvent to provision user if needed
    await messageBus.PublishAsync(
        new UserAuthenticatedEvent(phoneNumber, userType, phoneNumber));

    // Resolve user ID
    var userIdResult = await phoneResolver
        .ResolveUserIdAsync(phoneNumber, userType);

    if (userIdResult.Status != ResultStatus.Ok)
    {
        // Race condition: wait for user provisioning
        await Task.Delay(1000);
        userIdResult = await phoneResolver
            .ResolveUserIdAsync(phoneNumber, userType);
    }

    // Issue tokens
    return SignInWithIdentity(userIdResult.Value, userType);
}

"Sms": {
  "Provider": "Mock",
  "OtpExpiryMinutes": 5,
  "OtpLength": 6,
  "MaxOtpAttempts": 3,
  "MaxResendAttempts": 3,
  "ResendCooldownMinutes": 1,
  "ResendWindowMinutes": 60
}