ValidationServer/Program.cs at master · Kuarma/ValidationServer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
using System.Threading.RateLimiting;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.RateLimiting;
using Microsoft.AspNetCore.Routing;
using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;
using Serilog;
using ValidationServer.Database;
using ValidationServer.Health;
using ValidationServer.Identity;
using ValidationServer.Identity._2FA;

var builder = WebApplication.CreateBuilder(args);

builder.Host.UseSerilog((context, loggerConfig) =>
    loggerConfig.ReadFrom.Configuration(context.Configuration)
    );

builder.Services.AddDbContext<AppDbContext>(optionsBuilder =>
{
    optionsBuilder.UseNpgsql(builder.Configuration["ConnectionStrings:DefaultConnection"]!);
});

builder.Services.AddAuthorization();
builder.Services.AddAuthentication()
    .AddCookie(IdentityConstants.ApplicationScheme);

builder.Services.AddIdentityCore<User>()
    .AddEntityFrameworkStores<AppDbContext>()
    .AddApiEndpoints();

builder.Services.AddRateLimiter(options =>
{
    options.RejectionStatusCode = StatusCodes.Status429TooManyRequests;
    options.AddFixedWindowLimiter(
        policyName: RateLimitingPolicies.Lenient,
        rateLimiterOptions =>
        {
            rateLimiterOptions.Window = TimeSpan.FromSeconds(10);
            rateLimiterOptions.PermitLimit = 10;
            rateLimiterOptions.QueueProcessingOrder =
                QueueProcessingOrder.OldestFirst;
            rateLimiterOptions.QueueLimit = 6;
        });
    options.AddFixedWindowLimiter(
        policyName: RateLimitingPolicies.Normal,
        rateLimiterOptions =>
        {
            rateLimiterOptions.Window = TimeSpan.FromSeconds(20);
            rateLimiterOptions.PermitLimit = 4;
            rateLimiterOptions.QueueProcessingOrder =
                QueueProcessingOrder.OldestFirst;
            rateLimiterOptions.QueueLimit = 4;
        });
    options.AddFixedWindowLimiter(
        policyName: RateLimitingPolicies.Strict,
        rateLimiterOptions =>
        {
            rateLimiterOptions.Window = TimeSpan.FromSeconds(30);
            rateLimiterOptions.PermitLimit = 3;
            rateLimiterOptions.QueueProcessingOrder =
                QueueProcessingOrder.OldestFirst;
            rateLimiterOptions.QueueLimit = 2;
        });
});

builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen();

builder.Services.AddHealthChecks()
    .AddCheck<DatabaseHealthCheck>("Check_Database_Health");

builder.Services.AddOptions<SmtpOptions>()
    .BindConfiguration("Smtp");

builder.Services.AddTransient<IEmailSender<UserIdentity>, EmailSender>();

var app = builder.Build();

app.UseSerilogRequestLogging();

if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI();
    app.MapHealthServiceEndpoints();

    app.ApplyMigrations();
}

app.UseHttpsRedirection();

app.UseAuthorization();
app.UseAuthentication();

app.UseRateLimiter();

app.MapIdentityApi<User>();

await app.RunAsync();