refactor(api): split startup configuration

2026-07-28 12:25:28 +08:00
parent 5d2248efee
commit e43ae0574c
10 changed files with 640 additions and 496 deletions
--- a/Tiku.Api/Configuration/NetworkConfigurationExtensions.cs
+++ b/Tiku.Api/Configuration/NetworkConfigurationExtensions.cs
@@ -0,0 +1,79 @@
+using System.Net;
+using Microsoft.AspNetCore.HttpOverrides;
+using Tiku.Api.Options;
+using Tiku.Application.Tenancy;
+
+namespace Tiku.Api.Configuration;
+
+internal static class NetworkConfigurationExtensions
+{
+    internal static IServiceCollection AddNetworkConfiguration(
+        this IServiceCollection services,
+        IConfiguration configuration)
+    {
+        services.AddOptions<TenantResolutionOptions>()
+            .Bind(configuration.GetSection(TenantResolutionOptions.SectionName));
+        services.Configure<ForwardedHeadersOptions>(options =>
+        {
+            options.ForwardedHeaders =
+                ForwardedHeaders.XForwardedFor |
+                ForwardedHeaders.XForwardedHost |
+                ForwardedHeaders.XForwardedProto;
+            options.ForwardLimit = 1;
+            options.KnownProxies.Clear();
+            options.KnownIPNetworks.Clear();
+
+            var resolution = configuration
+                .GetSection(TenantResolutionOptions.SectionName)
+                .Get<TenantResolutionOptions>() ?? new TenantResolutionOptions();
+            foreach (var address in resolution.TrustedProxyAddresses)
+            {
+                if (IPAddress.TryParse(address, out var proxy))
+                {
+                    options.KnownProxies.Add(proxy);
+                }
+            }
+        });
+        services.AddOptions<DomainLifecycleOptions>()
+            .Bind(configuration.GetSection("TenantDomains"));
+
+        services.AddOptions<CorsOptions>()
+            .Bind(configuration.GetSection(CorsOptions.SectionName))
+            .ValidateDataAnnotations()
+            .Validate(
+                OptionsValidation.BeValidCorsOptions,
+                "CORS origins must be absolute HTTP/HTTPS origins, and credentials require explicit origins.")
+            .ValidateOnStart();
+
+        var corsOptions = configuration
+            .GetSection(CorsOptions.SectionName)
+            .Get<CorsOptions>() ?? new CorsOptions();
+        services.AddCors(options =>
+        {
+            options.AddPolicy(CorsOptions.PolicyName, policy =>
+            {
+                var origins = corsOptions.AllowedOrigins
+                    .Where(origin => !string.IsNullOrWhiteSpace(origin))
+                    .Select(origin => origin.Trim().TrimEnd('/'))
+                    .Distinct(StringComparer.OrdinalIgnoreCase)
+                    .ToArray();
+
+                if (origins.Length > 0)
+                {
+                    policy.WithOrigins(origins);
+                }
+
+                policy
+                    .WithHeaders(corsOptions.AllowedHeaders)
+                    .WithMethods(corsOptions.AllowedMethods);
+
+                if (corsOptions.AllowCredentials)
+                {
+                    policy.AllowCredentials();
+                }
+            });
+        });
+
+        return services;
+    }
+}