Program.cs

using API.Data;
using API.Helpers;
using API.Services;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using API.Interfaces;
using Microsoft.EntityFrameworkCore;
using Microsoft.IdentityModel.Tokens;
using Microsoft.OpenApi.Models;
using System.Security.Claims;
using System.Text;
using API.Interfaces.SuperAdmin;
using API.Services.SuperAdmin;
using API.Services.Dashboard.Organization.Regions;
using API.Interfaces.Dashboard.Organization.Regions;
using API.Interfaces.Dashboard.Organization.Locations;
using API.Services.Dashboard.Organization.Locations;
using API.Interfaces.Dashboard.Organization.UnderDepartments;
using API.Services.Dashboard.Organization.UnderDepartments;
using API.Interfaces.Dashboard.Organization.Department;
using API.Services.Dashboard.Organization.Departments;
using API.Interfaces.Dashboard.Organization.Shifts;
using API.Services.Dashboard.Organization.Shifts;
using API.Interfaces.Dashboard.Organization.Branch;
using API.Services.Dashboard.Organization.Branch;
using API.Services.Dashboard.Organization;
using API.Interfaces.Dashboard.Organization;

// Build app
var builder = WebApplication.CreateBuilder(args);

// Bind JWT settings from appsettings.json
var jwtSettings = builder.Configuration.GetSection("Jwt").Get<JwtSettings>();
builder.Services.AddSingleton(jwtSettings);

// DbContext
builder.Services.AddDbContext<AppDbContext>(options =>
    options.UseSqlServer(builder.Configuration.GetConnectionString("DefaultConnection")));

// Services
builder.Services.AddScoped<IAuthService, AuthService>();
builder.Services.AddScoped<ICompanyService, CompanyService>();
builder.Services.AddScoped<IAdminService, AdminService>();
builder.Services.AddScoped<ISuperAdminCompanyService, SuperAdminCompanyService>();
builder.Services.AddScoped<IRegionService, RegionService>();
builder.Services.AddScoped<ILocationService, LocationService>();
builder.Services.AddScoped<IUnderDepartmentService, UnderDepartmentService>();
builder.Services.AddScoped<IDepartmentService, DepartmentService>();
builder.Services.AddScoped<IShiftService, ShiftService>();
builder.Services.AddScoped<IBranchService, BranchService>();
builder.Services.AddScoped<IBankService, BankService>();






builder.Services.AddSingleton(new JwtHelper(jwtSettings.Secret, jwtSettings.ExpiryMinutes));

// JWT Authentication
var key = Encoding.ASCII.GetBytes(jwtSettings.Secret);
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuer = jwtSettings.ValidateIssuer,
            ValidateAudience = jwtSettings.ValidateAudience,
            ValidateLifetime = jwtSettings.ValidateLifetime,
            ValidateIssuerSigningKey = jwtSettings.ValidateIssuerSigningKey,
            ValidIssuer = jwtSettings.Issuer,
            ValidAudience = jwtSettings.Audience,
            IssuerSigningKey = new SymmetricSecurityKey(key)
        };
    });

// Authorization policies
builder.Services.AddAuthorization(options =>
{
    options.AddPolicy("SuperAdminOnly", policy =>
        policy.RequireClaim(ClaimTypes.Role, "1")); // RoleId = 1 → SuperAdmin
});

// Controllers & Swagger
builder.Services.AddControllers();
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen(c =>
{
    c.AddSecurityDefinition("Bearer", new OpenApiSecurityScheme
    {
        Description = "JWT Authorization header using the Bearer scheme. Just paste the token, 'Bearer ' will be added automatically.",
        Name = "Authorization",
        In = ParameterLocation.Header,
        Type = SecuritySchemeType.Http,
        Scheme = "bearer",
        BearerFormat = "JWT"
    });

    c.AddSecurityRequirement(new OpenApiSecurityRequirement
    {
        {
            new OpenApiSecurityScheme
            {
                Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "Bearer" }
            },
            new string[] { }
        }
    });
});

// Build app
var app = builder.Build();
app.UseStaticFiles(); // Add before UseAuthorization()

// Swagger
app.UseSwagger();
app.UseSwaggerUI();

// Middleware
app.UseAuthentication();
app.UseAuthorization();

app.MapControllers();
app.Run();