@ -1,78 +1,21 @@
var builder = WebApplication . CreateBuilder ( args ) ;
builder . WebHost . UseContentRoot ( Directory . GetCurrentDirectory ( ) ) ;
builder . Services . AddApplicationInsightsTelemetry ( builder . Configuration ) ;
builder . Services . AddApplicationInsightsKubernetesEnricher ( ) ;
builder . Services . AddHealthChecks ( )
. AddCheck ( "self" , ( ) = > HealthCheckResult . Healthy ( ) )
. AddUrlGroup ( new Uri ( builder . Configuration [ "IdentityUrlHC" ] ) , name : "identityapi-check" , tags : new string [ ] { "identityapi" } ) ;
builder . AddServiceDefaults ( ) ;
builder . Services . AddHealthChecks ( builder . Configuration ) ;
builder . Services . Configure < AppSettings > ( builder . Configuration ) ;
if ( builder . Configuration . GetValue < string > ( "IsClusterEnv" ) = = bool . TrueString )
{
builder . Services . AddDataProtection ( opts = >
{
opts . ApplicationDiscriminator = "eshop.webspa" ;
} )
. PersistKeysToStackExchangeRedis ( ConnectionMultiplexer . Connect ( builder . Configuration [ "DPConnectionString" ] ) , "DataProtection-Keys" ) ;
}
// Add Anti-forgery services and configure the header name that angular will use by default.
builder . Services . AddAntiforgery ( options = > options . HeaderName = "X-XSRF-TOKEN" ) ;
// Add controllers support and add a global AutoValidateAntiforgeryTokenFilter that will make the application check for an Anti-forgery token on all "mutating" requests (POST, PUT, DELETE).
// The AutoValidateAntiforgeryTokenFilter is an internal class registered when we register views, so we need to register controllers and views also.
builder . Services . AddControllersWithViews ( options = > options . Filters . Add ( new AutoValidateAntiforgeryTokenAttribute ( ) ) )
. AddJsonOptions ( options = >
{
options . JsonSerializerOptions . PropertyNameCaseInsensitive = true ;
} ) ;
// Setup where the compiled version of our spa application will be, when in production.
builder . Services . AddSpaStaticFiles ( configuration = >
builder . Services . AddSpaStaticFiles ( options = >
{
configuration . RootPath = "wwwroot" ;
options . RootPath = "wwwroot" ;
} ) ;
builder . Logging . AddConfiguration ( builder . Configuration . GetSection ( "Logging" ) ) ;
builder . Logging . AddAzureWebAppDiagnostics ( ) ;
var app = builder . Build ( ) ;
// Here we add Angular default Anti-forgery cookie name on first load. https://angular.io/guide/http#security-xsrf-protection
// This cookie will be read by Angular app and its value will be sent back to the application as the header configured in .AddAntiforgery()
var antiForgery = app . Services . GetRequiredService < IAntiforgery > ( ) ;
app . Use ( next = > context = >
{
string path = context . Request . Path . Value ;
if ( string . Equals ( path , "/" , StringComparison . OrdinalIgnoreCase ) | |
string . Equals ( path , "/index.html" , StringComparison . OrdinalIgnoreCase ) )
{
// The request token has to be sent as a JavaScript-readable cookie,
// and Angular uses it by default.
var tokens = antiForgery . GetAndStoreTokens ( context ) ;
context . Response . Cookies . Append ( "XSRF-TOKEN" , tokens . RequestToken ,
new CookieOptions ( ) { HttpOnly = false } ) ;
}
app . UseServiceDefaults ( ) ;
return next ( context ) ;
} ) ;
// Seed Data
WebContextSeed . Seed ( app , app . Environment , app . Services . GetRequiredService < ILogger < WebContextSeed > > ( ) ) ;
var pathBase = app . Configuration [ "PATH_BASE" ] ;
if ( ! string . IsNullOrEmpty ( pathBase ) )
{
app . Services . GetRequiredService < ILogger < WebContextSeed > > ( ) . LogDebug ( "Using PATH_BASE '{PathBase}'" , pathBase ) ;
app . UsePathBase ( pathBase ) ;
}
app . UseDefaultFiles ( ) ;
app . UseStaticFiles ( ) ;
app . UseFileServer ( ) ;
// This will make the application to respond with the index.html and the rest of the assets present on the configured folder (at AddSpaStaticFiles() (wwwroot))
if ( ! app . Environment . IsDevelopment ( ) )
@ -81,16 +24,12 @@ if (!app.Environment.IsDevelopment())
}
app . UseRouting ( ) ;
app . MapDefaultControllerRoute ( ) ;
app . MapControllers ( ) ;
app . MapHealthChecks ( "/liveness" , new HealthCheckOptions
{
Predicate = r = > r . Name . Contains ( "self" )
} ) ;
app . MapHealthChecks ( "/hc" , new HealthCheckOptions ( )
#pragma warning disable ASP0014 // Suggest using top level route registrations
app . UseEndpoints ( routes = >
{
Predicate = _ = > true ,
ResponseWriter = UIResponseWriter . WriteHealthCheckUIResponse
// TODO: Change this route
routes . MapGet ( "/home/configuration" , ( IOptions < AppSettings > options ) = > options . Value ) ;
} ) ;
// Handles all still unattended (by any other middleware) requests by returning the default page of the SPA (wwwroot/index.html).
@ -109,4 +48,7 @@ app.UseSpa(spa =>
}
} ) ;
// Seed Data
WebContextSeed . Seed ( app , app . Environment , app . Logger ) ;
await app . RunAsync ( ) ;
David Fowler
1 year ago