Update

src/BackOffice.BFF.Application/BackOffice.BFF.Application.csproj

@@ -1,19 +1,21 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
-  <PropertyGroup>
+	<PropertyGroup>
-    <TargetFramework>net7.0</TargetFramework>
+		<TargetFramework>net7.0</TargetFramework>
-    <Nullable>enable</Nullable>
+		<Nullable>enable</Nullable>
-  </PropertyGroup>
+	</PropertyGroup>
 
-  <ItemGroup>
+	<ItemGroup>
-    <PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.2.2" />
+		<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.2.2" />
-    <PackageReference Include="Foursat.CMSMicroservice.Protobuf" Version="0.0.116" />
+		<PackageReference Include="Foursat.CMSMicroservice.Protobuf" Version="0.0.116" />
-    <PackageReference Include="Mapster" Version="7.3.0" />
+		<PackageReference Include="Mapster" Version="7.3.0" />
-    <PackageReference Include="Mapster.DependencyInjection" Version="1.0.0" />
+		<PackageReference Include="Mapster.DependencyInjection" Version="1.0.0" />
-    <PackageReference Include="MediatR.Extensions.Microsoft.DependencyInjection" Version="11.0.0" />    
+		<PackageReference Include="MediatR.Extensions.Microsoft.DependencyInjection" Version="11.0.0" />
-  </ItemGroup>
+		<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.14.0" />
-  <ItemGroup>
+
-    <ProjectReference Include="..\BackOffice.BFF.Domain\BackOffice.BFF.Domain.csproj" />
+	</ItemGroup>
-  </ItemGroup>
+	<ItemGroup>
+		<ProjectReference Include="..\BackOffice.BFF.Domain\BackOffice.BFF.Domain.csproj" />
+	</ItemGroup>
 
 </Project>

src/BackOffice.BFF.Application/Common/Interfaces/IAfrinoIdpService.cs

@@ -0,0 +1,14 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace BackOffice.BFF.Application.Common.Interfaces;
+public interface IAfrinoIdpService
+{
+    Task<bool> SendOtp(string mobile);
+    Task<string> VerifyOtp(string mobile, string otpCode);
+    Task<string> CreateUser(string mobile);
+    Task<bool> AddRole(string mobile, string role);
+}

src/BackOffice.BFF.Application/Common/Mappings/OtpProfile.cs

@@ -0,0 +1,10 @@
+namespace BackOffice.BFF.Application.Common.Mappings;
+
+public class OtpProfile : IRegister
+{
+    void IRegister.Register(TypeAdapterConfig config)
+    {
+        //config.NewConfig<Source,Destination>()
+        //    .Map(dest => dest.FullName, src => $"{src.Firstname} {src.Lastname}");
+    }
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommand.cs

@@ -0,0 +1,7 @@
+namespace BackOffice.BFF.Application.OtpCQ.Commands.SendOtp;
+public record SendOtpCommand : IRequest<Unit>
+{
+    //شماره موبایل 
+    public string Mobile { get; init; }
+
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandHandler.cs

@@ -0,0 +1,22 @@
+using BackOffice.BFF.Application.Common.Interfaces;
+
+namespace BackOffice.BFF.Application.OtpCQ.Commands.SendOtp;
+public class SendOtpCommandHandler : IRequestHandler<SendOtpCommand, Unit>
+{
+    private readonly IApplicationContractContext _context;
+    private readonly IAfrinoIdpService _afrinoIdpService;
+
+    public SendOtpCommandHandler(IApplicationContractContext context, IAfrinoIdpService afrinoIdpService)
+    {
+        _context = context;
+        _afrinoIdpService = afrinoIdpService;
+    }
+
+    public async Task<Unit> Handle(SendOtpCommand request, CancellationToken cancellationToken)
+    {
+        if (!await _afrinoIdpService.SendOtp(request.Mobile))
+            throw new Exception(message: "خطا در ارسال OTP");
+
+        return Unit.Value;
+    }
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandValidator.cs

@@ -0,0 +1,16 @@
+namespace BackOffice.BFF.Application.OtpCQ.Commands.SendOtp;
+public class SendOtpCommandValidator : AbstractValidator<SendOtpCommand>
+{
+    public SendOtpCommandValidator()
+    {
+        RuleFor(model => model.Mobile)
+            .NotEmpty();
+    }
+    public Func<object, string, Task<IEnumerable<string>>> ValidateValue => async (model, propertyName) =>
+    {
+        var result = await ValidateAsync(ValidationContext<SendOtpCommand>.CreateWithOptions((SendOtpCommand)model, x => x.IncludeProperties(propertyName)));
+        if (result.IsValid)
+            return Array.Empty<string>();
+        return result.Errors.Select(e => e.ErrorMessage);
+    };
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommand.cs

@@ -0,0 +1,11 @@
+namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode;
+public record VerifyOtpCodeCommand : IRequest<VerifyOtpCodeResponseDto>
+{
+    //شماره موبایل 
+    public string Mobile { get; init; }
+    //رمز پویا 
+    public string Code { get; init; }
+    //شناسه پدر 
+    public long? ParentId { get; init; }
+
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandHandler.cs

@@ -0,0 +1,46 @@
+namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode;
+using System.IdentityModel.Tokens.Jwt;
+
+public class VerifyOtpCodeCommandHandler : IRequestHandler<VerifyOtpCodeCommand, VerifyOtpCodeResponseDto>
+{
+    private readonly IApplicationContractContext _context;
+    private readonly IAfrinoIdpService _afrinoIdpService;
+
+    public VerifyOtpCodeCommandHandler(IApplicationContractContext context, IAfrinoIdpService afrinoIdpService)
+    {
+        _context = context;
+        _afrinoIdpService = afrinoIdpService;
+
+    }
+
+    public async Task<VerifyOtpCodeResponseDto> Handle(VerifyOtpCodeCommand request, CancellationToken cancellationToken)
+    {
+        var response = await _afrinoIdpService.VerifyOtp(mobile: request.Mobile, otpCode: request.Code);
+        
+        return new VerifyOtpCodeResponseDto()
+        {
+            Token = response
+        };
+    }
+    public static string? GetUserIdFromToken(string token)
+    {
+        if (string.IsNullOrWhiteSpace(token))
+        {
+            throw new ArgumentException("توکن نمی‌تواند خالی باشد.");
+        }
+
+        var handler = new JwtSecurityTokenHandler();
+
+        if (!handler.CanReadToken(token))
+        {
+            throw new ArgumentException("توکن نامعتبر است.");
+        }
+
+        var jwtToken = handler.ReadJwtToken(token);
+
+        // بررسی اینکه آیا claim مربوط به userId موجود است
+        var userIdClaim = jwtToken.Claims.FirstOrDefault(c => c.Type == "UserId");
+
+        return userIdClaim?.Value;
+    }
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandValidator.cs

@@ -0,0 +1,18 @@
+namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode;
+public class VerifyOtpCodeCommandValidator : AbstractValidator<VerifyOtpCodeCommand>
+{
+    public VerifyOtpCodeCommandValidator()
+    {
+        RuleFor(model => model.Mobile)
+            .NotEmpty();
+        RuleFor(model => model.Code)
+            .NotEmpty();
+    }
+    public Func<object, string, Task<IEnumerable<string>>> ValidateValue => async (model, propertyName) =>
+    {
+        var result = await ValidateAsync(ValidationContext<VerifyOtpCodeCommand>.CreateWithOptions((VerifyOtpCodeCommand)model, x => x.IncludeProperties(propertyName)));
+        if (result.IsValid)
+            return Array.Empty<string>();
+        return result.Errors.Select(e => e.ErrorMessage);
+    };
+}

src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeResponseDto.cs

@@ -0,0 +1,7 @@
+namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode;
+public class VerifyOtpCodeResponseDto
+{
+    //توکن 
+    public string Token { get; set; }
+
+}

src/BackOffice.BFF.Infrastructure/ConfigureServices.cs

@@ -1,9 +1,10 @@
-using System.Diagnostics;
 using BackOffice.BFF.Application.Common.Interfaces;
 using BackOffice.BFF.Infrastructure.Services;
 using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Http;
 using Microsoft.Extensions.Configuration;
+using Microsoft.IdentityModel.Tokens;
+using System.Diagnostics;
 
 namespace Microsoft.Extensions.DependencyInjection;
 
@@ -11,6 +12,7 @@ public static class ConfigureServices
 {
     public static IServiceCollection AddInfrastructureServices(this IServiceCollection services, IConfiguration configuration)
     {
+        services.AddSingleton<IAfrinoIdpService, AfrinoIdpService>();
         services.AddSingleton<IApplicationContractContext, ApplicationContractContext>();
         services.AddInfrastructureGrpcServices(configuration);
         #region AddAuthentication
@@ -19,11 +21,24 @@ public static class ConfigureServices
         services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
             .AddJwtBearer(jwtBearerOptions =>
             {
-                jwtBearerOptions.Authority = configuration["Authentication:Authority"];
+                //jwtBearerOptions.Authority = configuration["Authentication:Authority"];
-                jwtBearerOptions.Audience = configuration["Authentication:Audience"];
+                //jwtBearerOptions.Audience = configuration["Authentication:Audience"];
-                jwtBearerOptions.TokenValidationParameters.ValidateAudience = false;                
+                //jwtBearerOptions.TokenValidationParameters.ValidateAudience = false;                
-                jwtBearerOptions.TokenValidationParameters.ValidateIssuer = true;
+                //jwtBearerOptions.TokenValidationParameters.ValidateIssuer = true;
-                jwtBearerOptions.TokenValidationParameters.ValidateIssuerSigningKey = false;
+                //jwtBearerOptions.TokenValidationParameters.ValidateIssuerSigningKey = false;
+
+                jwtBearerOptions.SaveToken = true;
+                jwtBearerOptions.RequireHttpsMetadata = false;
+                jwtBearerOptions.TokenValidationParameters = new TokenValidationParameters
+                {
+                    ValidateIssuer = true,
+                    ValidateAudience = true,
+                    ValidateLifetime = true,
+                    ValidateIssuerSigningKey = true,
+                    ValidIssuer = configuration["JwtIssuer"],
+                    ValidAudience = configuration["JwtAudience"],
+                    IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(configuration["JwtSecurityKey"]))
+                };
                 try
                 {
                     jwtBearerOptions.Events = new JwtBearerEvents

src/BackOffice.BFF.Infrastructure/Services/AfrinoIdpService.cs

@@ -0,0 +1,156 @@
+using BackOffice.BFF.Application.Common.Interfaces;
+using Microsoft.Extensions.Logging;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Net.Http;
+using System.Net.Http.Json;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace BackOffice.BFF.Infrastructure.Services;
+public class AfrinoIdpService : IAfrinoIdpService
+{
+    private readonly HttpClient _httpClient;
+    private readonly ILogger<AfrinoIdpService> _logger;
+
+    public AfrinoIdpService(HttpClient httpClient, ILogger<AfrinoIdpService> logger)
+    {
+        _httpClient = httpClient;
+        _logger = logger;
+
+        _httpClient.BaseAddress = new Uri("https://ids.afrino.co");
+    }
+
+    public async Task<bool> SendOtp(string mobile)
+    {
+        if (string.IsNullOrWhiteSpace(mobile))
+        {
+            _logger.LogError(message: "شماره موبایل نمی‌تواند خالی باشد!!");
+            return false;
+        }
+
+        var response = await _httpClient.PostAsJsonAsync<SendOtpRequestDto>("api/Auth/send-otp", new() { PhoneNumber = mobile });
+        if (!response.IsSuccessStatusCode)
+        {
+            var errorMessage = await response.Content.ReadAsStringAsync();
+            _logger.LogError($"خطا در ارسال OTP: {errorMessage}");
+            return false;
+        }
+
+        _logger.LogInformation("OTP با موفقیت ارسال شد.");
+        return true;
+    }
+
+    public async Task<string> VerifyOtp(string mobile, string otpCode)
+    {
+        if (string.IsNullOrWhiteSpace(mobile))
+        {
+            _logger.LogError("شماره موبایل نمی‌تواند خالی باشد!!");
+            throw new ArgumentException("شماره موبایل نمی‌تواند خالی باشد!!");
+        }
+
+        if (string.IsNullOrWhiteSpace(otpCode))
+        {
+            _logger.LogError("رمز پویا نمی‌تواند خالی باشد!!");
+            throw new ArgumentException("رمز پویا نمی‌تواند خالی باشد!!");
+        }
+
+        var response = await _httpClient.PostAsJsonAsync<VerifyOtpRequestDto>("api/Auth/verify-otp", new() { PhoneNumber = mobile, OtpCode = otpCode });
+        if (!response.IsSuccessStatusCode)
+        {
+            var errorMessage = await response.Content.ReadAsStringAsync();
+            _logger.LogError($"خطا در فعال سازی OTP: {errorMessage}");
+            throw new HttpRequestException($"خطا در فعال سازی OTP: {errorMessage}");
+        }
+
+        var result = await response.Content.ReadFromJsonAsync<VerifyOtpResponseDto>();
+        if (result == null || string.IsNullOrEmpty(result.Token))
+        {
+            _logger.LogError("توکن دریافتی از سرور خالی است.");
+            throw new Exception("توکن دریافتی از سرور خالی است.");
+        }
+
+        return result.Token;
+    }
+
+    public async Task<string> CreateUser(string mobile)
+    {
+        if (string.IsNullOrWhiteSpace(mobile))
+        {
+            _logger.LogError(message: "شماره موبایل نمی‌تواند خالی باشد!!");
+            throw new ArgumentException("شماره موبایل نمی‌تواند خالی باشد!!");
+        }
+
+        var response = await _httpClient.PostAsJsonAsync<CreateUserRequestDto>("api/Auth/create-user", new() { PhoneNumber = mobile });
+        if (!response.IsSuccessStatusCode)
+        {
+            var errorMessage = await response.Content.ReadAsStringAsync();
+            _logger.LogError($"خطا : {errorMessage}");
+            throw new HttpRequestException($"خطا : {errorMessage}");
+        }
+
+        var result = await response.Content.ReadFromJsonAsync<CreateUserResponseDto>();
+        if (result == null || string.IsNullOrEmpty(result.UserId))
+        {
+            _logger.LogError("شناسه کاربر دریافتی از سرور خالی است.");
+            throw new Exception("شناسه کاربر دریافتی از سرور خالی است.");
+        }
+
+        return result.UserId;
+    }
+
+    public async Task<bool> AddRole(string mobile, string role)
+    {
+        if (string.IsNullOrWhiteSpace(mobile))
+        {
+            _logger.LogError(message: "شماره موبایل نمی‌تواند خالی باشد!!");
+            return false;
+        }
+        if (string.IsNullOrWhiteSpace(role))
+        {
+            _logger.LogError(message: "نقش نمی‌تواند خالی باشد!!");
+            return false;
+        }
+        var response = await _httpClient.PostAsJsonAsync<AddRoleRequestDto>("api/Auth/add-role", new() { PhoneNumber = mobile, Role = role });
+        if (!response.IsSuccessStatusCode)
+        {
+            var errorMessage = await response.Content.ReadAsStringAsync();
+            _logger.LogError($"خطا : {errorMessage}");
+            return false;
+        }
+
+        _logger.LogInformation("نقش با موفقیت اضافه شد.");
+        return true;
+    }
+}
+
+public class SendOtpRequestDto
+{
+    public string PhoneNumber { get; set; }
+}
+
+public class VerifyOtpRequestDto
+{
+    public string PhoneNumber { get; set; }
+    public string OtpCode { get; set; }
+}
+public class VerifyOtpResponseDto
+{
+    public string Token { get; set; }
+}
+public class CreateUserRequestDto
+{
+    public string PhoneNumber { get; set; }
+}
+
+public class CreateUserResponseDto
+{
+    public string UserId { get; set; }
+}
+
+public class AddRoleRequestDto
+{
+    public string PhoneNumber { get; set; }
+    public string Role { get; set; }
+}

src/BackOffice.BFF.WebApi/BackOffice.BFF.WebApi.csproj

@@ -1,4 +1,4 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
+<Project Sdk="Microsoft.NET.Sdk.Web">
 
     <PropertyGroup>
         <TargetFramework>net7.0</TargetFramework>
@@ -20,6 +20,7 @@
     <ItemGroup>
         <ProjectReference Include="..\BackOffice.BFF.Application\BackOffice.BFF.Application.csproj" />
         <ProjectReference Include="..\BackOffice.BFF.Infrastructure\BackOffice.BFF.Infrastructure.csproj" />
+        <ProjectReference Include="..\Protobufs\BackOffice.BFF.Otp.Protobuf\BackOffice.BFF.Otp.Protobuf.csproj" />
     </ItemGroup>
     <ItemGroup>
     <ProjectReference Include="..\Protobufs\BackOffice.BFF.User.Protobuf\BackOffice.BFF.User.Protobuf.csproj" />

src/BackOffice.BFF.WebApi/Common/Mappings/OtpProfile.cs

@@ -0,0 +1,10 @@
+namespace BackOffice.BFF.WebApi.Common.Mappings;
+
+public class OtpProfile : IRegister
+{
+    void IRegister.Register(TypeAdapterConfig config)
+    {
+        //config.NewConfig<Source,Destination>()
+        //    .Map(dest => dest.FullName, src => $"{src.Firstname} {src.Lastname}");
+    }
+}

src/BackOffice.BFF.WebApi/Services/OtpService.cs

@@ -0,0 +1,22 @@
+using BackOffice.BFF.Otp.Protobuf.Protos.Otp;
+using BackOffice.BFF.WebApi.Common.Services;
+using BackOffice.BFF.Application.OtpCQ.Commands.SendOtp;
+using BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode;
+namespace BackOffice.BFF.WebApi.Services;
+public class OtpService : OtpContract.OtpContractBase
+{
+    private readonly IDispatchRequestToCQRS _dispatchRequestToCQRS;
+
+    public OtpService(IDispatchRequestToCQRS dispatchRequestToCQRS)
+    {
+        _dispatchRequestToCQRS = dispatchRequestToCQRS;
+    }
+    public override async Task<Empty> SendOtp(SendOtpRequest request, ServerCallContext context)
+    {
+        return await _dispatchRequestToCQRS.Handle<SendOtpRequest, SendOtpCommand>(request, context);
+    }
+    public override async Task<VerifyOtpCodeResponse> VerifyOtpCode(VerifyOtpCodeRequest request, ServerCallContext context)
+    {
+        return await _dispatchRequestToCQRS.Handle<VerifyOtpCodeRequest, VerifyOtpCodeCommand, VerifyOtpCodeResponse>(request, context);
+    }
+}

src/BackOffice.BFF.WebApi/appsettings.json

@@ -20,5 +20,9 @@
   "Authentication": {
     "Authority": "https://ids.domain.com/",
     "Audience": "domain_api"
+  },
+  "Kavenegar": {
+    "Sender": "1000001110100",
+    "ApiKey": "497263626F32626A48685A6137524C4F78575A766E4C74694A556B79317648424964655030682B554545413D"
   }
 }

src/BackOffice.BFF.sln

@@ -24,6 +24,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BackOffice.BFF.UserRole.Pro
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BackOffice.BFF.UserAddress.Protobuf", "Protobufs\BackOffice.BFF.UserAddress.Protobuf\BackOffice.BFF.UserAddress.Protobuf.csproj", "{CB811954-E42E-75BB-A02D-689180B72E28}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BackOffice.BFF.Otp.Protobuf", "Protobufs\BackOffice.BFF.Otp.Protobuf\BackOffice.BFF.Otp.Protobuf.csproj", "{E1833EDA-39E9-C241-2772-E4C7E960AC41}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -70,6 +72,10 @@ Global
 		{CB811954-E42E-75BB-A02D-689180B72E28}.Debug|Any CPU.Build.0 = Debug|Any CPU
 		{CB811954-E42E-75BB-A02D-689180B72E28}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{CB811954-E42E-75BB-A02D-689180B72E28}.Release|Any CPU.Build.0 = Release|Any CPU
+		{E1833EDA-39E9-C241-2772-E4C7E960AC41}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{E1833EDA-39E9-C241-2772-E4C7E960AC41}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{E1833EDA-39E9-C241-2772-E4C7E960AC41}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{E1833EDA-39E9-C241-2772-E4C7E960AC41}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
@@ -81,6 +87,7 @@ Global
 		{B688459B-67B0-3170-79C6-AB05DB7E911D} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8}
 		{75481681-ABB4-2A4C-8901-FE7242DE5B20} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8}
 		{CB811954-E42E-75BB-A02D-689180B72E28} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8}
+		{E1833EDA-39E9-C241-2772-E4C7E960AC41} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8}
 	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		SolutionGuid = {0AE1AB4A-3C91-4853-93C2-C2476E79F845}

src/Protobufs/BackOffice.BFF.Otp.Protobuf/BackOffice.BFF.Otp.Protobuf.csproj

@@ -0,0 +1,41 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+	<PropertyGroup>
+		<TargetFramework>net7.0</TargetFramework>
+		<ImplicitUsings>enable</ImplicitUsings>
+		<Nullable>enable</Nullable>
+		<Version>0.0.111</Version>
+		<DebugType>None</DebugType>
+		<DebugSymbols>False</DebugSymbols>
+		<GeneratePackageOnBuild>False</GeneratePackageOnBuild>
+		<PackageId>Foursat.BackOffice.BFF.Otp.Protobuf</PackageId>
+	</PropertyGroup>
+
+	<ItemGroup>
+		<PackageReference Include="Google.Protobuf" Version="3.23.3" />
+		<PackageReference Include="Grpc.Core.Api" Version="2.54.0" />
+		<PackageReference Include="Grpc.Tools" Version="2.55.1">
+			<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+			<PrivateAssets>all</PrivateAssets>
+		</PackageReference>
+		<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.2.2" />
+		<PackageReference Include="Google.Api.CommonProtos" Version="2.10.0" />
+	</ItemGroup>
+
+	<ItemGroup>
+		<Protobuf Include="Protos\otp.proto" ProtoRoot="Protos\" GrpcServices="Both" />
+	</ItemGroup>
+
+	<Target Name="PushToFourSat" AfterTargets="Pack">
+		<PropertyGroup>
+			<NugetPackagePath>$(PackageOutputPath)$(PackageId).$(Version).nupkg</NugetPackagePath>
+			<PushCommand>
+				dotnet nuget push **/*.nupkg --source https://git.afrino.co/api/packages/FourSat/nuget/index.json --api-key 061a5cb15517c6da39c16cfce8556c55ae104d0d --skip-duplicate
+			</PushCommand>
+		</PropertyGroup>
+
+		<Exec Command="$(PushCommand)" />
+	</Target>
+
+
+</Project>

src/Protobufs/BackOffice.BFF.Otp.Protobuf/ConfigureServices.cs

@@ -0,0 +1,14 @@
+using FluentValidation;
+using System.Reflection;
+
+namespace Microsoft.Extensions.DependencyInjection;
+
+public static class ConfigureServices
+{
+    public static IServiceCollection AddOtpProtobufServices(this IServiceCollection services)
+    {        
+        services.AddValidatorsFromAssembly(Assembly.GetExecutingAssembly());        
+        return services;
+    }    
+}
+

src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/annotations.proto

@@ -0,0 +1,31 @@
+// Copyright (c) 2015, Google Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.api;
+
+import "google/api/http.proto";
+import "google/protobuf/descriptor.proto";
+
+option go_package = "google.golang.org/genproto/googleapis/api/annotations;annotations";
+option java_multiple_files = true;
+option java_outer_classname = "AnnotationsProto";
+option java_package = "com.google.api";
+option objc_class_prefix = "GAPI";
+
+extend google.protobuf.MethodOptions {
+  // See `HttpRule`.
+  HttpRule http = 72295728;
+}

src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/http.proto

@@ -0,0 +1,377 @@
+// Copyright 2019 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+syntax = "proto3";
+
+package google.api;
+
+option cc_enable_arenas = true;
+option go_package = "google.golang.org/genproto/googleapis/api/annotations;annotations";
+option java_multiple_files = true;
+option java_outer_classname = "HttpProto";
+option java_package = "com.google.api";
+option objc_class_prefix = "GAPI";
+
+// Defines the HTTP configuration for an API service. It contains a list of
+// [HttpRule][google.api.HttpRule], each specifying the mapping of an RPC method
+// to one or more HTTP REST API methods.
+message Http {
+  // A list of HTTP configuration rules that apply to individual API methods.
+  //
+  // **NOTE:** All service configuration rules follow "last one wins" order.
+  repeated HttpRule rules = 1;
+
+  // When set to true, URL path parameters will be fully URI-decoded except in
+  // cases of single segment matches in reserved expansion, where "%2F" will be
+  // left encoded.
+  //
+  // The default behavior is to not decode RFC 6570 reserved characters in multi
+  // segment matches.
+  bool fully_decode_reserved_expansion = 2;
+}
+
+// # gRPC Transcoding
+//
+// gRPC Transcoding is a feature for mapping between a gRPC method and one or
+// more HTTP REST endpoints. It allows developers to build a single API service
+// that supports both gRPC APIs and REST APIs. Many systems, including [Google
+// APIs](https://github.com/googleapis/googleapis),
+// [Cloud Endpoints](https://cloud.google.com/endpoints), [gRPC
+// Gateway](https://github.com/grpc-ecosystem/grpc-gateway),
+// and [Envoy](https://github.com/envoyproxy/envoy) proxy support this feature
+// and use it for large scale production services.
+//
+// `HttpRule` defines the schema of the gRPC/REST mapping. The mapping specifies
+// how different portions of the gRPC request message are mapped to the URL
+// path, URL query parameters, and HTTP request body. It also controls how the
+// gRPC response message is mapped to the HTTP response body. `HttpRule` is
+// typically specified as an `google.api.http` annotation on the gRPC method.
+//
+// Each mapping specifies a URL path template and an HTTP method. The path
+// template may refer to one or more fields in the gRPC request message, as long
+// as each field is a non-repeated field with a primitive (non-message) type.
+// The path template controls how fields of the request message are mapped to
+// the URL path.
+//
+// Example:
+//
+//     service Messaging {
+//       rpc GetMessage(GetMessageRequest) returns (Message) {
+//         option (google.api.http) = {
+//             get: "/v1/{name=messages/*}"
+//         };
+//       }
+//     }
+//     message GetMessageRequest {
+//       string name = 1; // Mapped to URL path.
+//     }
+//     message Message {
+//       string text = 1; // The resource content.
+//     }
+//
+// This enables an HTTP REST to gRPC mapping as below:
+//
+// HTTP | gRPC
+// -----|-----
+// `GET /v1/messages/123456`  | `GetMessage(name: "messages/123456")`
+//
+// Any fields in the request message which are not bound by the path template
+// automatically become HTTP query parameters if there is no HTTP request body.
+// For example:
+//
+//     service Messaging {
+//       rpc GetMessage(GetMessageRequest) returns (Message) {
+//         option (google.api.http) = {
+//             get:"/v1/messages/{message_id}"
+//         };
+//       }
+//     }
+//     message GetMessageRequest {
+//       message SubMessage {
+//         string subfield = 1;
+//       }
+//       string message_id = 1; // Mapped to URL path.
+//       int64 revision = 2;    // Mapped to URL query parameter `revision`.
+//       SubMessage sub = 3;    // Mapped to URL query parameter `sub.subfield`.
+//     }
+//
+// This enables a HTTP JSON to RPC mapping as below:
+//
+// HTTP | gRPC
+// -----|-----
+// `GET /v1/messages/123456?revision=2&sub.subfield=foo` |
+// `GetMessage(message_id: "123456" revision: 2 sub: SubMessage(subfield:
+// "foo"))`
+//
+// Note that fields which are mapped to URL query parameters must have a
+// primitive type or a repeated primitive type or a non-repeated message type.
+// In the case of a repeated type, the parameter can be repeated in the URL
+// as `...?param=A&param=B`. In the case of a message type, each field of the
+// message is mapped to a separate parameter, such as
+// `...?foo.a=A&foo.b=B&foo.c=C`.
+//
+// For HTTP methods that allow a request body, the `body` field
+// specifies the mapping. Consider a REST update method on the
+// message resource collection:
+//
+//     service Messaging {
+//       rpc UpdateMessage(UpdateMessageRequest) returns (Message) {
+//         option (google.api.http) = {
+//           patch: "/v1/messages/{message_id}"
+//           body: "message"
+//         };
+//       }
+//     }
+//     message UpdateMessageRequest {
+//       string message_id = 1; // mapped to the URL
+//       Message message = 2;   // mapped to the body
+//     }
+//
+// The following HTTP JSON to RPC mapping is enabled, where the
+// representation of the JSON in the request body is determined by
+// protos JSON encoding:
+//
+// HTTP | gRPC
+// -----|-----
+// `PATCH /v1/messages/123456 { "text": "Hi!" }` | `UpdateMessage(message_id:
+// "123456" message { text: "Hi!" })`
+//
+// The special name `*` can be used in the body mapping to define that
+// every field not bound by the path template should be mapped to the
+// request body.  This enables the following alternative definition of
+// the update method:
+//
+//     service Messaging {
+//       rpc UpdateMessage(Message) returns (Message) {
+//         option (google.api.http) = {
+//           patch: "/v1/messages/{message_id}"
+//           body: "*"
+//         };
+//       }
+//     }
+//     message Message {
+//       string message_id = 1;
+//       string text = 2;
+//     }
+//
+//
+// The following HTTP JSON to RPC mapping is enabled:
+//
+// HTTP | gRPC
+// -----|-----
+// `PATCH /v1/messages/123456 { "text": "Hi!" }` | `UpdateMessage(message_id:
+// "123456" text: "Hi!")`
+//
+// Note that when using `*` in the body mapping, it is not possible to
+// have HTTP parameters, as all fields not bound by the path end in
+// the body. This makes this option more rarely used in practice when
+// defining REST APIs. The common usage of `*` is in custom methods
+// which don't use the URL at all for transferring data.
+//
+// It is possible to define multiple HTTP methods for one RPC by using
+// the `additional_bindings` option. Example:
+//
+//     service Messaging {
+//       rpc GetMessage(GetMessageRequest) returns (Message) {
+//         option (google.api.http) = {
+//           get: "/v1/messages/{message_id}"
+//           additional_bindings {
+//             get: "/v1/users/{user_id}/messages/{message_id}"
+//           }
+//         };
+//       }
+//     }
+//     message GetMessageRequest {
+//       string message_id = 1;
+//       string user_id = 2;
+//     }
+//
+// This enables the following two alternative HTTP JSON to RPC mappings:
+//
+// HTTP | gRPC
+// -----|-----
+// `GET /v1/messages/123456` | `GetMessage(message_id: "123456")`
+// `GET /v1/users/me/messages/123456` | `GetMessage(user_id: "me" message_id:
+// "123456")`
+//
+// ## Rules for HTTP mapping
+//
+// 1. Leaf request fields (recursive expansion nested messages in the request
+//    message) are classified into three categories:
+//    - Fields referred by the path template. They are passed via the URL path.
+//    - Fields referred by the [HttpRule.body][google.api.HttpRule.body]. They are passed via the HTTP
+//      request body.
+//    - All other fields are passed via the URL query parameters, and the
+//      parameter name is the field path in the request message. A repeated
+//      field can be represented as multiple query parameters under the same
+//      name.
+//  2. If [HttpRule.body][google.api.HttpRule.body] is "*", there is no URL query parameter, all fields
+//     are passed via URL path and HTTP request body.
+//  3. If [HttpRule.body][google.api.HttpRule.body] is omitted, there is no HTTP request body, all
+//     fields are passed via URL path and URL query parameters.
+//
+// ### Path template syntax
+//
+//     Template = "/" Segments [ Verb ] ;
+//     Segments = Segment { "/" Segment } ;
+//     Segment  = "*" | "**" | LITERAL | Variable ;
+//     Variable = "{" FieldPath [ "=" Segments ] "}" ;
+//     FieldPath = IDENT { "." IDENT } ;
+//     Verb     = ":" LITERAL ;
+//
+// The syntax `*` matches a single URL path segment. The syntax `**` matches
+// zero or more URL path segments, which must be the last part of the URL path
+// except the `Verb`.
+//
+// The syntax `Variable` matches part of the URL path as specified by its
+// template. A variable template must not contain other variables. If a variable
+// matches a single path segment, its template may be omitted, e.g. `{var}`
+// is equivalent to `{var=*}`.
+//
+// The syntax `LITERAL` matches literal text in the URL path. If the `LITERAL`
+// contains any reserved character, such characters should be percent-encoded
+// before the matching.
+//
+// If a variable contains exactly one path segment, such as `"{var}"` or
+// `"{var=*}"`, when such a variable is expanded into a URL path on the client
+// side, all characters except `[-_.~0-9a-zA-Z]` are percent-encoded. The
+// server side does the reverse decoding. Such variables show up in the
+// [Discovery
+// Document](https://developers.google.com/discovery/v1/reference/apis) as
+// `{var}`.
+//
+// If a variable contains multiple path segments, such as `"{var=foo/*}"`
+// or `"{var=**}"`, when such a variable is expanded into a URL path on the
+// client side, all characters except `[-_.~/0-9a-zA-Z]` are percent-encoded.
+// The server side does the reverse decoding, except "%2F" and "%2f" are left
+// unchanged. Such variables show up in the
+// [Discovery
+// Document](https://developers.google.com/discovery/v1/reference/apis) as
+// `{+var}`.
+//
+// ## Using gRPC API Service Configuration
+//
+// gRPC API Service Configuration (service config) is a configuration language
+// for configuring a gRPC service to become a user-facing product. The
+// service config is simply the YAML representation of the `google.api.Service`
+// proto message.
+//
+// As an alternative to annotating your proto file, you can configure gRPC
+// transcoding in your service config YAML files. You do this by specifying a
+// `HttpRule` that maps the gRPC method to a REST endpoint, achieving the same
+// effect as the proto annotation. This can be particularly useful if you
+// have a proto that is reused in multiple services. Note that any transcoding
+// specified in the service config will override any matching transcoding
+// configuration in the proto.
+//
+// Example:
+//
+//     http:
+//       rules:
+//         # Selects a gRPC method and applies HttpRule to it.
+//         - selector: example.v1.Messaging.GetMessage
+//           get: /v1/messages/{message_id}/{sub.subfield}
+//
+// ## Special notes
+//
+// When gRPC Transcoding is used to map a gRPC to JSON REST endpoints, the
+// proto to JSON conversion must follow the [proto3
+// specification](https://developers.google.com/protocol-buffers/docs/proto3#json).
+//
+// While the single segment variable follows the semantics of
+// [RFC 6570](https://tools.ietf.org/html/rfc6570) Section 3.2.2 Simple String
+// Expansion, the multi segment variable **does not** follow RFC 6570 Section
+// 3.2.3 Reserved Expansion. The reason is that the Reserved Expansion
+// does not expand special characters like `?` and `#`, which would lead
+// to invalid URLs. As the result, gRPC Transcoding uses a custom encoding
+// for multi segment variables.
+//
+// The path variables **must not** refer to any repeated or mapped field,
+// because client libraries are not capable of handling such variable expansion.
+//
+// The path variables **must not** capture the leading "/" character. The reason
+// is that the most common use case "{var}" does not capture the leading "/"
+// character. For consistency, all path variables must share the same behavior.
+//
+// Repeated message fields must not be mapped to URL query parameters, because
+// no client library can support such complicated mapping.
+//
+// If an API needs to use a JSON array for request or response body, it can map
+// the request or response body to a repeated field. However, some gRPC
+// Transcoding implementations may not support this feature.
+message HttpRule {
+  // Selects a method to which this rule applies.
+  //
+  // Refer to [selector][google.api.DocumentationRule.selector] for syntax details.
+  string selector = 1;
+
+  // Determines the URL pattern is matched by this rules. This pattern can be
+  // used with any of the {get|put|post|delete|patch} methods. A custom method
+  // can be defined using the 'custom' field.
+  oneof pattern {
+    // Maps to HTTP GET. Used for listing and getting information about
+    // resources.
+    string get = 2;
+
+    // Maps to HTTP PUT. Used for replacing a resource.
+    string put = 3;
+
+    // Maps to HTTP POST. Used for creating a resource or performing an action.
+    string post = 4;
+
+    // Maps to HTTP DELETE. Used for deleting a resource.
+    string delete = 5;
+
+    // Maps to HTTP PATCH. Used for updating a resource.
+    string patch = 6;
+
+    // The custom pattern is used for specifying an HTTP method that is not
+    // included in the `pattern` field, such as HEAD, or "*" to leave the
+    // HTTP method unspecified for this rule. The wild-card rule is useful
+    // for services that provide content to Web (HTML) clients.
+    CustomHttpPattern custom = 8;
+  }
+
+  // The name of the request field whose value is mapped to the HTTP request
+  // body, or `*` for mapping all request fields not captured by the path
+  // pattern to the HTTP body, or omitted for not having any HTTP request body.
+  //
+  // NOTE: the referred field must be present at the top-level of the request
+  // message type.
+  string body = 7;
+
+  // Optional. The name of the response field whose value is mapped to the HTTP
+  // response body. When omitted, the entire response message will be used
+  // as the HTTP response body.
+  //
+  // NOTE: The referred field must be present at the top-level of the response
+  // message type.
+  string response_body = 12;
+
+  // Additional HTTP bindings for the selector. Nested bindings must
+  // not contain an `additional_bindings` field themselves (that is,
+  // the nesting may only be one level deep).
+  repeated HttpRule additional_bindings = 11;
+}
+
+// A custom pattern is used for defining custom HTTP verb.
+message CustomHttpPattern {
+  // The name of this custom HTTP verb.
+  string kind = 1;
+
+  // The path matched by this custom verb.
+  string path = 2;
+}
+

src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/otp.proto

@@ -0,0 +1,69 @@
+syntax = "proto3";
+
+package otp;
+
+import "google/protobuf/empty.proto";
+import "google/protobuf/wrappers.proto";
+import "google/protobuf/duration.proto";  
+import "google/protobuf/timestamp.proto";
+import "google/api/annotations.proto";
+
+option csharp_namespace = "BackOffice.BFF.Otp.Protobuf.Protos.Otp";
+
+service OtpContract
+{
+    rpc SendOtp(SendOtpRequest) returns (google.protobuf.Empty){
+        option (google.api.http) = {
+            post: "/SendOtp"
+            body: "*"
+        };
+    };
+    rpc VerifyOtpCode(VerifyOtpCodeRequest) returns (VerifyOtpCodeResponse){
+        option (google.api.http) = {
+            post: "/VerifyOtpCode"
+            body: "*"
+        };
+    };
+}
+message SendOtpRequest
+{
+    string mobile = 1;
+}
+message VerifyOtpCodeRequest
+{
+    string mobile = 1;
+    string code = 2;
+    google.protobuf.Int64Value parent_id = 3;
+}
+message VerifyOtpCodeResponse
+{
+    string token = 1;
+}
+
+message PaginationState
+{
+  int32 page_number = 1;
+
+  int32 page_size = 2;
+}
+message MetaData
+{
+  int64 current_page = 1;
+
+  int64 total_page = 2;
+
+  int64 page_size = 3;
+
+  int64 total_count = 4;
+
+  bool has_previous = 5;
+
+  bool has_next = 6;
+}
+message DecimalValue 
+{
+
+    int64 units = 1;
+
+    sfixed32 nanos = 2;
+}

src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/SendOtpRequestValidator.cs

@@ -0,0 +1,19 @@
+using FluentValidation;
+using BackOffice.BFF.Otp.Protobuf.Protos.Otp;
+namespace BackOffice.BFF.Otp.Protobuf.Validator;
+
+public class SendOtpRequestValidator : AbstractValidator<SendOtpRequest>
+{
+    public SendOtpRequestValidator()
+    {
+        RuleFor(model => model.Mobile)
+            .NotEmpty();
+    }
+    public Func<object, string, Task<IEnumerable<string>>> ValidateValue => async (model, propertyName) =>
+    {
+        var result = await ValidateAsync(ValidationContext<SendOtpRequest>.CreateWithOptions((SendOtpRequest)model, x => x.IncludeProperties(propertyName)));
+        if (result.IsValid)
+            return Array.Empty<string>();
+        return result.Errors.Select(e => e.ErrorMessage);
+    };
+}

src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/VerifyOtpCodeRequestValidator.cs

@@ -0,0 +1,21 @@
+using FluentValidation;
+using BackOffice.BFF.Otp.Protobuf.Protos.Otp;
+namespace BackOffice.BFF.Otp.Protobuf.Validator;
+
+public class VerifyOtpCodeRequestValidator : AbstractValidator<VerifyOtpCodeRequest>
+{
+    public VerifyOtpCodeRequestValidator()
+    {
+        RuleFor(model => model.Mobile)
+            .NotEmpty();
+        RuleFor(model => model.Code)
+            .NotEmpty();
+    }
+    public Func<object, string, Task<IEnumerable<string>>> ValidateValue => async (model, propertyName) =>
+    {
+        var result = await ValidateAsync(ValidationContext<VerifyOtpCodeRequest>.CreateWithOptions((VerifyOtpCodeRequest)model, x => x.IncludeProperties(propertyName)));
+        if (result.IsValid)
+            return Array.Empty<string>();
+        return result.Errors.Select(e => e.ErrorMessage);
+    };
+}