.gitignore

@@ -10,6 +10,7 @@
 *.userosscache
 *.sln.docstates
 *.env
+*.env.json
 
 # User-specific files (MonoDevelop/Xamarin Studio)
 *.userprefs
@@ -55,6 +56,7 @@ bld/
 
 # Visual Studio 2015/2017 cache/options directory
 .vs/
+.vscode/
 # Uncomment if you have tasks that create the project's static files in wwwroot
 #wwwroot/
 

PostFundManagement.Api/PostFundManagement.Api.csproj

@@ -1,14 +1,16 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
+<Project Sdk="Microsoft.NET.Sdk.Web">
 
   <PropertyGroup>
     <TargetFramework>net10.0</TargetFramework>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
+    <UserSecretsId>59a05094-4ac2-472d-af04-3407e909432d</UserSecretsId>
   </PropertyGroup>
 
   <ItemGroup>
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.11" />
     <PackageReference Include="Microsoft.OpenApi" Version="2.12.0" />
+    <PackageReference Include="Scalar.AspNetCore" Version="2.16.20" />
   </ItemGroup>
 
 </Project>

PostFundManagement.Api/PostFundManagement.Api.http

@@ -1,6 +0,0 @@
-@PostFundManagement.Api_HostAddress = http://localhost:5112
-
-GET {{PostFundManagement.Api_HostAddress}}/weatherforecast/
-Accept: application/json
-
-###

PostFundManagement.Api/Program.cs

@@ -1,3 +1,5 @@
+using Scalar.AspNetCore;
+
 var builder = WebApplication.CreateBuilder(args);
 
 // Add services to the container.
@@ -9,6 +11,11 @@ var app = builder.Build();
 // Configure the HTTP request pipeline.
 if (app.Environment.IsDevelopment())
 {
+    app.MapScalarApiReference(options =>
+    {
+        options.WithTitle("Post-fund Management API")
+        .WithTheme(ScalarTheme.BluePlanet);
+    });
     app.MapOpenApi();
 }
 

PostFundManagement.Api/appsettings.Development.json

@@ -1,8 +0,0 @@
-{
-  "Logging": {
-    "LogLevel": {
-      "Default": "Information",
-      "Microsoft.AspNetCore": "Warning"
-    }
-  }
-}

PostFundManagement.Api/appsettings.json

@@ -1,4 +1,8 @@
 {
+  "MachineIdentity": {
+    "Authority": "https://sts.security.khongisa.co.za",
+    "Audience": "pfm-api-dev"
+  },
   "Logging": {
     "LogLevel": {
       "Default": "Information",

PostFundManagement.Api/http/api.http

@@ -0,0 +1,16 @@
+@hostname = api.example.com
+@port = 8080
+@host = {{hostname}}:{{port}}
+@contentType = application/json
+
+###
+# @prompt username
+# @prompt refCode Your reference code display on webpage
+# @prompt otp Your one-time password in your mailbox
+POST https://{{host}}/verify-otp/{{refCode}} HTTP/1.1
+Content-Type: {{contentType}}
+
+{
+    "username": "{{username}}",
+    "otp": "{{otp}}"
+}

PostFundManagement.Api/http/token.http

@@ -0,0 +1,6 @@
+### Token Request
+POST https://{{authority}}/connect/token
+Content-Type: application/x-www-form-urlencoded
+Accept-Encoding: identity
+
+grant_type={{grantType}}&client_id={{clientId}}&client_secret={{clientSecret}}&scope={{scope}}

PostFundManagement.Infrastructure/Configuration/MachineIdentity.cs

@@ -0,0 +1,12 @@
+namespace PostFundManagement.Infrastructure.Configuration;
+
+public sealed class MachineIdentity
+{
+    public string? Authority { get; set; }
+
+    public string? Audience { get; set; }
+
+    public string? ClientId { get; set; }
+
+    public string? ClientSecret { get; set; }
+}