using Microsoft.Extensions.DependencyInjection;

namespace GB5Shared.Auth.Jwt
{
    /// <summary>
    /// Registers the shared JWT issuance mechanics (IJwtAccessTokenIssuer, IJwtSigningKeyResolver).
    /// Requires <c>AddGB5Vault(configuration)</c> to have already been called — this only wires
    /// the JWT-specific layer on top of the already-registered IVaultService.
    /// Call once per host: <c>builder.Services.AddGB5JwtIssuer();</c>
    /// </summary>
    public static class JwtIssuerServiceExtensions
    {
        public static IServiceCollection AddGB5JwtIssuer(this IServiceCollection services)
        {
            services.AddSingleton<IJwtSigningKeyResolver, JwtSigningKeyResolver>();
            services.AddSingleton<IJwtAccessTokenIssuer, JwtAccessTokenIssuer>();
            return services;
        }
    }
}