Program.cs

using System.Text;
using Amazon;
using Amazon.S3;
using BlobService.Common.Logger;
using BlobService.Common.Settings;
using BlobService.Middlewares;
using BlobService.Services.Implementations;
using BlobService.Services.Interfaces;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.Extensions.Logging.Console;
using Microsoft.IdentityModel.Tokens;

var builder = WebApplication.CreateBuilder(args);

// ── Load settings ────────────────────────────────────────────────────────────

// AWS S3
BlobSettings.AwsAccessKey = builder.Configuration.GetValue<string>("AWS:AccessKey");
BlobSettings.AwsSecretKey = builder.Configuration.GetValue<string>("AWS:SecretKey");
BlobSettings.AwsRegion = builder.Configuration.GetValue<string>("AWS:Region");
BlobSettings.AwsBucketName = builder.Configuration.GetValue<string>("AWS:BucketName");
BlobSettings.AwsBucketDir = builder.Configuration.GetValue<string>("AWS:BucketNameDir") ?? $"{BlobSettings.AwsBucketName}/";

// Chat service
BlobSettings.ChatServiceBaseUrl = builder.Configuration.GetValue<string>("ChatService:BaseUrl");
BlobSettings.ChatServiceCallbackPath = builder.Configuration.GetValue<string>("ChatService:CallbackPath");
BlobSettings.InternalServiceKey = builder.Configuration.GetValue<string>("ChatService:InternalKey");

// JWT
AppSettings.JwtIssuer = builder.Configuration.GetValue<string>("Jwt:Issuer");
AppSettings.JwtAudience = builder.Configuration.GetValue<string>("Jwt:Audience");
AppSettings.JwtSecretKey = builder.Configuration.GetValue<string>("Jwt:SecretKey");

// ── AWS S3 ────────────────────────────────────────────────────────────────────

var s3Config = new AmazonS3Config
{
    RegionEndpoint = RegionEndpoint.GetBySystemName(BlobSettings.AwsRegion ?? "ap-south-1")
};

builder.Services.AddSingleton<IAmazonS3>(_ =>
    new AmazonS3Client(BlobSettings.AwsAccessKey, BlobSettings.AwsSecretKey, s3Config));

// ── CORS ──────────────────────────────────────────────────────────────────────

var allowedOrigins = builder.Configuration.GetSection("Cors:AllowedOrigins").Get<string[]>()
                     ?? Array.Empty<string>();

builder.Services.AddCors(options =>
{
    options.AddPolicy("BlobPolicy", policy =>
    {
        policy.AllowAnyOrigin()
              .AllowAnyHeader()
              .AllowAnyMethod();
    });
});

// ── Services ──────────────────────────────────────────────────────────────────

builder.Services.AddOpenApi();

builder.Services.AddHttpClient("ChatService", client =>
{
    client.BaseAddress = new Uri(BlobSettings.ChatServiceBaseUrl!);
    client.Timeout = TimeSpan.FromSeconds(30);
});

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = AppSettings.JwtIssuer,
            ValidAudience = AppSettings.JwtAudience,
            IssuerSigningKey = new SymmetricSecurityKey(
                                           Encoding.UTF8.GetBytes(AppSettings.JwtSecretKey!))
        };
    });

builder.Logging.ClearProviders();
builder.Logging.AddConsole(options =>
{
    options.FormatterName = CustomConsoleLogger.FormatterName;
});
builder.Logging.AddConsoleFormatter<CustomConsoleLogger, ConsoleFormatterOptions>();

builder.Services.AddControllers();
builder.Services.AddScoped<IAuthService, AuthService>();
builder.Services.AddScoped<IS3StorageService, S3StorageService>();

// ── Pipeline ──────────────────────────────────────────────────────────────────

var app = builder.Build();

if (app.Environment.IsDevelopment())
    app.MapOpenApi();

app.UseCors("BlobPolicy");
app.UseHttpsRedirection();
app.UseJwtValidation();
app.MapControllers();

app.Run();