API Genel Bakış

// ── Layer Registration ──────────────────────────────────────
builder.Services.AddHangfireServers(builder.Configuration);
builder.Services.AddInfrastructureEFCore(builder.Configuration);   // DbContext, repository, interceptor, MassTransit Outbox
builder.Services.AddSmsService(builder.Configuration);             // OtpSmsService (NetGSM)
builder.Services.AddEmailService(builder.Configuration);           // EmailService (MailKit + Scriban)
builder.Services.AddAuthenticatorService(builder.Configuration);   // TOTP (OtpNet)
builder.Services.AddOAuthProviders(builder.Configuration);         // Google / Meta / Keycloak OAuth
builder.Services.AddNotificationService(builder.Configuration);    // SSE admin notification broadcaster
builder.AddApplication();                                          // MediatR + pipeline behavior'lar + AutoMapper

// ── Building Blocks ─────────────────────────────────────────
builder.Services.AddJwt(builder.Configuration);                    // BB.Jwt — uygulamanın kendi JWT scheme'i
builder.Services.AddDeviceDetector(builder.Configuration);

builder.Services.AddRedisCache(builder.Configuration);             // ① IDistributedCache (Redis)
builder.Services.AddCache(builder.Configuration);                  // ② IHybridRequestCache abstraction
builder.Services.AddHybridCache(/* L1 + L2 TTL */);                // ③ HybridCache (L1 memory + L2 Redis)

builder.Services.AddKeycloak(builder.Configuration);               // İki Keycloak JWT Bearer scheme (Vatandas + Personel)
builder.Services.AddKeycloakProvisioning(builder.Configuration);   // IHostedService — realm/client/user otomatik kurar
builder.Services.AddKeycloakExternalLoginProvisioning();           // OnTokenValidated → davetli kullanıcı aktivasyonu

builder.Services.AddDiyanetObservability(builder.Configuration);   // OTel + Prometheus (opt-in)

app.UseHttpsRedirection();
app.UseStaticFiles();                  // wwwroot/uploads/* — duyuru kapak görselleri
app.UseProblemDetails();               // RFC 7807 — exception → ProblemDetails
app.UseSerilogRequestLoggingMiddleware();
app.UseRequestLocalization(/* tr-TR default */);
app.UseRouting();
app.UseCors(/* Prod/Stage: Backoffice · Dev: AllowAll */);
app.UseAuthentication();
app.UseTokenVersionValidation();       // Feature flag: Security:TokenVersionValidation — RBAC invalidation
app.UseAuthorization();
app.UseHangfireDashboard(/* /jobs */);
app.UseOutputCache();
app.MapControllers();
app.MapHealthCheckEndpoints();         // /health/live, /health/ready, /health/external, /health/startup, /health
app.MapDiyanetObservabilityEndpoints();// /metrics (Observability:Enabled=true ise)
// Dev/Stage: MapOpenApi + Swagger UI + Scalar · Prod: Scalar (RequireAuthorization)