Add Steam OpenID authentication

microservices/AuthApi/Program.cs

@@ -4,6 +4,7 @@ using Microsoft.IdentityModel.Tokens;
 using Microsoft.OpenApi.Models;  
 using System.Security.Claims;
 using System.Text;
+using System.Threading.RateLimiting;
 
 var builder = WebApplication.CreateBuilder(args);
 builder.Services.AddControllers();
@@ -11,7 +12,26 @@ builder.Services.AddControllers();
 // DI
 builder.Services.AddSingleton<UserService>();
 builder.Services.AddSingleton<BlacklistService>();
+builder.Services.AddSingleton<SteamAuthTransactionService>();
+builder.Services.AddSingleton<JwtTokenService>();
+builder.Services.AddSingleton<SteamOpenIdService>();
 builder.Services.AddHttpClient();
+builder.Services.AddRateLimiter(options =>
+{
+    static RateLimitPartition<string> Policy(HttpContext context, int permits) =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            context.Connection.RemoteIpAddress?.ToString() ?? "unknown",
+            _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = permits,
+                Window = TimeSpan.FromMinutes(1),
+                QueueLimit = 0
+            });
+    options.AddPolicy("steam-start", context => Policy(context, 10));
+    options.AddPolicy("steam-poll", context => Policy(context, 120));
+    options.AddPolicy("steam-complete", context => Policy(context, 20));
+    options.RejectionStatusCode = StatusCodes.Status429TooManyRequests;
+});
 
 // Swagger + JWT auth in Swagger
 builder.Services.AddEndpointsApiExplorer();
@@ -81,6 +101,8 @@ app.UseSwaggerUI(o =>
     o.SwaggerEndpoint("/swagger/v1/swagger.json", "Auth API v1");
     o.RoutePrefix = "swagger";
 });
+app.UseRouting();
+app.UseRateLimiter();
 app.UseAuthentication();
 app.UseAuthorization();
 app.MapControllers();