Program.cs

using ApiProtection.Data;
using ApiProtection.Middleware;
using ApiProtection.Services;
using ApiProtection.Services.Interface;
using Microsoft.EntityFrameworkCore;
using StackExchange.Redis;

var builder = WebApplication.CreateBuilder(args);

// -----------------------------
// DATABASE
// -----------------------------
var connectionString =
    builder.Configuration.GetConnectionString("DefaultConnection")
    ?? throw new InvalidOperationException(
        "Connection string 'DefaultConnection' not found. Add it to appsettings.json."
    );

builder.Services.AddDbContext<AppDbContext>(options =>
    options.UseSqlServer(connectionString)
);

// -----------------------------
// CONTROLLERS & SWAGGER
// -----------------------------
builder.Services.AddControllers();
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen();

// -----------------------------
// REDIS (ONLY USED BY MIDDLEWARE)
// -----------------------------
var redisConfiguration = ConfigurationOptions.Parse("localhost:6379");
redisConfiguration.AbortOnConnectFail = false;
redisConfiguration.ConnectRetry = 3;
redisConfiguration.ConnectTimeout = 5000;

builder.Services.AddSingleton<IConnectionMultiplexer>(
    ConnectionMultiplexer.Connect(redisConfiguration)
);
            
// -----------------------------
// SQL SERVICES (SP CALLERS)
// -----------------------------
builder.Services.AddScoped<IApiKeySqlService, ApiKeySqlService>();
builder.Services.AddScoped<IBlockSqlService, BlockSqlService>();
builder.Services.AddScoped<IRatePolicySqlService, RatePolicySqlService>();
builder.Services.AddScoped<IRequestLogSqlService, RequestLogSqlService>();
builder.Services.AddScoped<IAdminBlockSqlService, AdminBlockSqlService>();
builder.Services.AddScoped<IAdminAnalyticsSqlService, AdminAnalyticsSqlService>();

// -----------------------------
// BUILD APP
// -----------------------------
var app = builder.Build();

// -----------------------------
// HTTP PIPELINE
// -----------------------------
if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI(c =>
        c.SwaggerEndpoint("/swagger/v1/swagger.json", "ApiProtection v1")
    );
}

// 🔒 RATE LIMIT & API PROTECTION (MUST BE BEFORE CONTROLLERS)
app.UseMiddleware<RateLimitMiddleware>();
app.UseMiddleware<GlobalExceptionMiddleware>();

app.UseHttpsRedirection();
app.UseAuthorization();

app.MapControllers();

app.Run();