Add Auth Endpoints

// AuthRoutes.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthRoutes
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        // Login Endpoint - The path can be any value you prefer, but it must match 
        // your Wristband application's configured login URL path and the SDK LoginUrl path.
        app.MapGet("/auth/login", async (HttpContext httpContext, IWristbandAuthService wristbandAuth) =>
        {
            try 
            {
                // Call the Wristband Login() method which will return a URL that should
                // be used to redirect to Wristband's hosted login page.
                var wristbandAuthorizeUrl = await wristbandAuth.Login(httpContext, null);
                return Results.Redirect(wristbandAuthorizeUrl);
            } 
            catch (Exception ex) 
            {
                return Results.Problem(detail: $"Unexpected error: {ex.Message}", statusCode: 500);
            }
        });

        ...
          
        return app;
    }
}

// AuthRoutes.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthRoutes
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        ...
      
        // Callback Endpoint - The path can be any value you prefer, but it must match 
        // the path of your OAuth2 Client callback URL and the SDK RedirectUri path.
        app.MapGet("/auth/callback", async (HttpContext httpContext, IWristbandAuthService wristbandAuth) =>
        {
            try
            {
                // Call the Wristband Callback() method to check if the user
                // successfully authenticated.  If the user did authenticate successfully, 
                // the user's tokens and claims can be retrieved from the callbackResult.
                var callbackResult = await wristbandAuth.Callback(httpContext);

                // For some edge cases, such as if an invalid grant was passed to the 
                // token API, the SDK will require a redirect to restart the login flow.
                if (callbackResult.Result == CallbackResultType.REDIRECT_REQUIRED)
                {
                    return Results.Redirect(callbackResult.RedirectUrl);
                }

                //
                // Typically, this is where you would create your session and add CSRF 
                // handling, however, we'll ignore those topics for now, as they will be 
                // covered in more detail later in this guide. 
                //

                // Once the Callback Endpoint has completed,  we redirect to your app's
                // default return URL (typically your app's home page) or to an explicit
                // return URL, if one was specified in the original login request.
                var appUrl = string.IsNullOrWhiteSpace(callbackResult.CallbackData.ReturnUrl)
                  ? "<replace_with_a_default_return_url>"
                  : callbackResult.CallbackData.ReturnUrl;
                return Results.Redirect(appUrl);
            } 
            catch (Exception ex)
            {
                return Results.Problem(detail: $"Unexpected error: {ex.Message}", statusCode: 500);
            }
        });

        ...
          
        return app;
    }
}

// AuthRoutes.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthRoutes
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        ...
        
        // Logout Endpoint - The path can be any value you prefer.
        app.MapGet("/auth/logout", async (HttpContext httpContext, IWristbandAuthService wristbandAuth) =>
        { 
            //
            // Typically, this is where you would delete state such as session and CSRF      
            // cookies. However, we'll ignore those topics for now, as they will be covered in
            // more detail later in this guide. 
            //
          
            try
            {
                // Call the Wristband Logout() method and use the returned URL to redirect
                // to Wristband's Logout Endpoint.  This will delete Wristband's session 
                // that is associated to the authenticated user.  When Wristband is done
                // logging out the user it will redirect back to your application's login 
                // URL or to the explicitly provided redirect URL.
                var wristbandLogoutUrl = await wristbandAuth.Logout(httpContext, null);
                return Results.Redirect(wristbandLogoutUrl);
            }
            catch (Exception ex)
            {
                return Results.Problem(detail: $"Unexpected error: {ex.Message}", statusCode: 500);
            }
        });
        
        ...
        
        return app;
    }
}

// Program.cs

...

// API routes
app.MapAuthEndpoints();

...