BuildingBlocks.FileServer

public static IApplicationBuilder UseMaviDepoFileServer(this IApplicationBuilder app, IConfiguration configuration)
{
    string root = configuration["FileProvider:Root"];
    var requestPath = new PathString(configuration["FileProvider:RequestPath"]);
    bool enableDirectoryBrowsing = Convert.ToBoolean(configuration["FileProvider:EnableDirectoryBrowsing"]);
    bool enableAuth = Convert.ToBoolean(configuration["FileProvider:EnableAuth"]);

    IFileProvider provider = enableAuth
        ? new PrivateMaviDepoFileProvider(app.ApplicationServices, root)  // auth-aware
        : new PhysicalFileProvider(root);                                 // public

    app.UseFileServer(new FileServerOptions
    {
        FileProvider = provider,
        RequestPath = requestPath,
        EnableDirectoryBrowsing = enableDirectoryBrowsing
    });
    return app;
}

{
  "FileProvider": {
    "Root": "/var/files",
    "RequestPath": "/files",
    "EnableDirectoryBrowsing": false,
    "EnableAuth": true
  }
}

public new IFileInfo GetFileInfo(string subpath)
{
    using IServiceScope scope = _serviceProvider.CreateScope();
    var user = scope.ServiceProvider.GetRequiredService<IFileServerUserContext>();

    if (!user.IsAuthenticated())
        return new NotFoundFileInfo(subpath);   // yetkisiz → "yok" gibi davran

    return base.GetFileInfo(subpath);
}

// BuildingBlocks.Keycloak — JwtBearerEvents.OnMessageReceived
var accessToken = ctx.Request.Query["access_token"];
if (!string.IsNullOrEmpty(accessToken) &&
    ctx.HttpContext.Request.Path.StartsWithSegments("/files"))
{
    ctx.Token = accessToken;
}

GET /files/raporlar/2026/ozet.pdf?access_token=eyJhbGciOiJSUzI1Ni␣...

// Program.cs
builder.Services.AddMaviDepoFileServer(builder.Configuration);

var app = builder.Build();
app.UseAuthentication();   // token'ın çözülmesi için ÖNCE
app.UseAuthorization();
app.UseMaviDepoFileServer(builder.Configuration);