Add Auth Endpoints

// AuthEndpoints.cs

using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthEndpoints
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        // Login Endpoint - route can be whatever you prefer
        app.MapGet("/auth/login", async (
            HttpContext ctx,
            IWristbandAuthService wristbandAuth) =>
        {
            // Call the Wristband Login() method which will return a URL that
            // should be used to redirect to Wristband's hosted login page.
            var wristbandAuthorizeUrl = await wristbandAuth.Login(ctx, null);
            return Results.Redirect(wristbandAuthorizeUrl);
        });

        // ...
          
        return app;
    }
}

// AuthRoutes.cs (continued)

using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthEndpoints
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        // ...
      
        // Callback Endpoint - route can be whatever you prefer
        app.MapGet("/auth/callback", async (
            HttpContext ctx,
            IWristbandAuthService wristbandAuth) =>
        {
            // Call the Wristband Callback() method to check if the user
            // successfully authenticated. If the user did authenticate successfully, 
            // the user's tokens and claims can be retrieved from the callbackResult.
            var callbackResult = await wristbandAuth.Callback(ctx);

            // For some edge cases, the SDK requires a redirect to restart the login flow.
            if (callbackResult.Type == CallbackResultType.RedirectRequired)
            {
                return Results.Redirect(callbackResult.RedirectUrl);
            }

            // Create a session for the authenticated user. If needed, custom fields can 
            // be stored in the session using the customClaims parameter of the 
            // CreateSessionFromCallback() extension method.
            ctx.CreateSessionFromCallback(callbackResult.CallbackData);

            // Once the Callback Endpoint has completed, we redirect to your app's
            // default return URL (typically your app's home page) or to an explicit
            // return URL, if one was specified in the original login request.
            var returnUrl = callbackResult.CallbackData.ReturnUrl;
            return Results.Redirect(returnUrl ?? "<replace_with_a_default_url>");
        });

        // ...
          
        return app;
    }
}

// AuthRoutes.cs (continued)

using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthEndpoints
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        // ...
        
        // Logout Endpoint - route can be whatever you prefer
        app.MapGet("/auth/logout", async (
            HttpContext ctx,
            IWristbandAuthService wristbandAuth) =>
        {
            // Wristband provides convenient HttpContext extension methods for getting
            // all the necessary session data needed to perform the logout operation.
            var logoutConfig = new LogoutConfig
            {
                RefreshToken = ctx.GetRefreshToken(),
                TenantCustomDomain = ctx.GetTenantCustomDomain(),
                TenantName = ctx.GetTenantName(),
            };

            // Use Wristband's extension method to clear your app's local session.
            ctx.DestroySession();

            // Call the Wristband Logout() method. This will revoke any refresh tokens
            // associated with the user and return a Response to redirect to Wristband's 
            // Logout Endpoint. Redirecting to Wristband's Logout Endpoint will terminate 
            // Wristband's auth session associated to the user. When Wristband is done
            // logging out the user it will redirect back to your application's login 
            // URL or to an explicitly provided redirect URL.
            var wristbandLogoutUrl = await wristbandAuth.Logout(ctx, logoutConfig);
            return Results.Redirect(wristbandLogoutUrl);
        });
        
        // ...
        
        return app;
    }
}

// AuthRoutes.cs (continued)

using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthEndpoints
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        // ...
        
        // Session Endpoint - route can be whatever you prefer.
        app.MapGet("/auth/session", async (
            HttpContext ctx,
            IWristbandAuthService wristbandAuth) =>
        {
            // Call the Wristband GetSessionResponse() extension method to extract the
            // user's session data and populate a SessionResponse. If needed, you can
            // add additional data to the SessionResponse by using the `metadata` 
            // parameter of the GetSessionResponse() method.
            var sessionResponse = ctx.GetSessionResponse();
            return Results.Ok(sessionResponse);
        })
        .RequireWristbandSession(); // Enforces that a valid session cookie is present in the request
        
        return app;
    }
}

// Program.cs (continued)

// ...

app.UseAuthentication();
app.UseAuthorization();
app.UseWristbandSessionMiddleware();


// ADD: Your API routes must go after your auth middlewares
app.MapAuthEndpoints();

app.Run();