BuildingBlocks.DeviceDetector

public static IServiceCollection AddDeviceDetector(this IServiceCollection services, IConfiguration configuration)
{
    services.AddScoped<IDeviceDetector, DefaultDeviceDetector>();
    services.AddScoped<IClientIpResolver, ClientIpResolver>();
    services.AddScoped<ITrustEvaluator, TrustEvaluator>();
    services.AddScoped<IClientSecurityContext, HttpClientSecurityContext>();  // fasad
    return services;
}

// Program.cs — AddJwt'ten sonra
builder.Services.AddDeviceDetector(builder.Configuration);

[HttpPost("api/website/public/auth/login")]
public async Task<IActionResult> Login([FromBody] LoginRequest req, [FromServices] IClientSecurityContext security)
{
    TrustDecisionDto trust = security.EvaluateTrust();
    DeviceDto device = security.GetDevice();
    IpDto ip = security.GetIp();

    if (trust.Level == TrustLevel.Untrusted)
        return StatusCode(403, $"İstek reddedildi: {trust.Reason}");

    if (trust.Level == TrustLevel.Challenge)
    {
        // OTP / reCAPTCHA gibi ek adım iste
        return await RequireAdditionalVerificationAsync(req, trust.RiskScore);
    }

    // Oturum başlat — cihaz/IP bilgisi UserSession'a yazılır
    var command = new LoginCommand(req.Phone, device, ip);
    return Ok(await _mediator.Send(command));
}

// User aggregate
public void StartSession(DeviceInfo device, ClientIpInfo ip, ...)
{
    var session = UserSession.Create(this.Id, device, ip, ...);
    _sessions.Add(session);
    AddDomainEvent(new UserSessionStartedDomainEvent(Id, session.Id));
}