Die Cookie-basierte Autorisierung wurde mit DirectorySearchService eingerichtet.

EnvelopeGenerator.GeneratorAPI/Program.cs

@@ -1,12 +1,45 @@
+using DigitalData.Core.API;
+using DigitalData.Core.Application;
+using DigitalData.UserManager.Application;
+using DigitalData.UserManager.Infrastructure.Repositories;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.EntityFrameworkCore;
+
 var builder = WebApplication.CreateBuilder(args);
 
-// Add services to the container.
+var config = builder.Configuration;
 
 builder.Services.AddControllers();
-// Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
+
+// Swagger
 builder.Services.AddEndpointsApiExplorer();
 builder.Services.AddSwaggerGen();
 
+// DbContext
+var connStr = config.GetConnectionString("Default") ?? throw new InvalidOperationException("There is no default connection string in appsettings.json.");
+builder.Services.AddDbContext<EGDbContext>(options => options.UseSqlServer(connStr));
+
+// Authentication
+builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
+    .AddCookie(options =>
+    {
+        options.Cookie.HttpOnly = true;  // Makes the cookie inaccessible to client-side scripts for security
+        options.Cookie.SecurePolicy = CookieSecurePolicy.SameAsRequest; // Ensures cookies are sent over HTTPS only
+        options.Cookie.SameSite = SameSiteMode.Strict; // Protects against CSRF attacks by restricting how cookies are sent with requests from external sites
+        options.LoginPath = "/api/auth/login";
+        options.LogoutPath = "/api/auth/logout";
+    });
+
+// User manager
+builder.Services.AddUserManager<EGDbContext>();
+
+// LDAP
+builder.ConfigureBySection<DirectorySearchOptions>();
+builder.Services.AddDirectorySearchService();
+
+// Localizer
+builder.Services.AddCookieBasedLocalizer() ;
+
 var app = builder.Build();
 
 // Configure the HTTP request pipeline.
@@ -16,12 +49,16 @@ if (app.Environment.IsDevelopment())
 	app.UseSwaggerUI();
 }
 
+// Localizer
+app.UseCookieBasedLocalizer("de-DE", "en-US");
+
 app.UseHttpsRedirection();
 
 app.UseDefaultFiles();
 app.UseStaticFiles();
 
 app.UseAuthorization();
+app.UseAuthentication();
 
 app.MapControllers();