Add Auth Endpoints

// AuthRoutes.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthRoutes
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        // Login Endpoint - The path can be any value you prefer, but it must match 
        // your Wristband application's configured login URL path and the SDK LoginUrl path.
        app.MapGet("/auth/login", async (HttpContext httpContext, IWristbandAuthService wristbandAuth) =>
        {
            try {
                // Call the Wristband Login() method which will return a URL that should
                // be used to redirect to Wristband's hosted login page.
                var wristbandAuthorizeUrl = await wristbandAuth.Login(httpContext, null);
                return Results.Redirect(wristbandAuthorizeUrl);
            } catch (Exception ex) {
                return Results.Problem(detail: $"Unexpected error: {ex.Message}", statusCode: 500);
            }
        })

        ...

    }
}

// AuthRoutes.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthRoutes
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        ...
      
        // Callback Endpoint - The path can be any value you prefer, but it must match 
        // the path of your OAuth2 Client callback URL and the SDK RedirectUri path.
        app.MapGet("/auth/callback", async (HttpContext httpContext, IWristbandAuthService wristbandAuth) =>
        {
            // Call the Wristband Callback() method to check if the user
            // successfully authenticated.  If the user did authenticate successfully, 
            // the user's tokens and claims can be retrieved from the callbackResult.
            var callbackResult = await wristbandAuth.Callback(httpContext);

            // For some edge cases, such as if an invalid grant was passed to the token API,
            // the SDK will require a redirect to restart the login flow.
            if (callbackResult.Result == CallbackResultType.REDIRECT_REQUIRED)
            {
                return Results.Redirect(callbackResult.RedirectUrl);
            }

            //
            // Typically, this is where you would create your session and add CSRF handling,
            // however, we'll ignore those topics for now, as they will be covered in more
            // detail later in this guide. 
            //

            // Once the Callback Endpoint has completed,  we redirect to your app's home page
            // or to an explicit return URL, if one was specified.
            var appUrl = callbackResult.CallbackData.ReturnUrl ?? "http://localhost:3000/your-react-home-route";
            return Results.Redirect(appUrl);
        }

      ...
    }
}

// AuthRoutes.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Wristband.AspNet.Auth;

public static class AuthRoutes
{
    public static WebApplication MapAuthEndpoints(this WebApplication app)
    {
        ...
        
        // Logout Endpoint - The path can be any value you prefer.
        app.MapGet("/auth/logout", async (HttpContext httpContext, IWristbandAuthService wristbandAuth) =>
        { 
            //
            // Typically, this is where you would delete state such as session and CSRF      
            // cookies. However, we'll ignore those topics for now, as they will be covered in
            // more detail later in this guide. 
            //
          
            try
            {
                // Call the Wristband Logout() method and use the returned URL to redirect
                // to Wristband's Logout Endpoint.  This will delete Wristband's session 
                // that is associated to the authenticated user.  When Wristband is done
                // logging out the user it will redirect back to your application's login 
                // URL or to the explicitly provided redirect URL.
                var wristbandLogoutUrl = await wristbandAuth.Logout(httpContext, null);
                return Results.Redirect(wristbandLogoutUrl);
            }
            catch (Exception ex)
            {
                return Results.Problem(detail: $"Unexpected error: {ex.Message}", statusCode: 500);
            }
        });
        
        ...
    }
}