using System.IdentityModel.Tokens.Jwt;
using HeadhuntNow.Front.Services;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authorization;
using MudBlazor.Services;

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddHttpClient();

builder.Services.AddMudServices();
builder.Services.AddRazorPages();
builder.Services.AddServerSideBlazor();

builder.Services.AddScoped<SqlService>();

var config = builder.Configuration;

JwtSecurityTokenHandler.DefaultMapInboundClaims = false;
builder.Services.AddAuthentication(
        options =>
        {
            options.DefaultScheme = "Cookies";
            options.DefaultChallengeScheme = "oidc";
        })
    .AddCookie("Cookies")
    .AddOpenIdConnect(
        "oidc",
        options =>
        {
            // options.Authority = config["DuendeServer"];
            options.Authority = "https://localhost:5001";
            // options.ClientId = config["DuendeId"];
            options.ClientId = "dev";
            options.Prompt = "login";
            options.ClientSecret = "secret";
            options.ResponseType = "code";

            options.Scope.Add("verification");
            options.ClaimActions.MapJsonKey("email_verified", "email_verified");
            options.Scope.Add("openid");
            options.Scope.Add("profile");
            options.GetClaimsFromUserInfoEndpoint = true;
            options.SaveTokens = true;

        })
    ;

// builder.Services.AddAuthorization();
builder.Services.AddAuthorization(options =>
{
    options.DefaultPolicy = new AuthorizationPolicyBuilder()
        .AddAuthenticationSchemes()
        .RequireAuthenticatedUser()
        .Build();

});

var app = builder.Build();

if (!app.Environment.IsDevelopment())
{
    app.UseHsts();
}
app.UseHttpsRedirection();

app.UseStaticFiles();

app.UseRouting();
app.UseAuthentication();
app.UseAuthorization();

app.MapBlazorHub()
    ;
app.MapFallbackToPage("/_Host")
    ;

app.Run();