boilercraft 1.0.0

package/stacks/dotnet-core/overlays/api-auth/Controllers/AuthController.cs

@@ -0,0 +1,87 @@
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+using System.Text;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.IdentityModel.Tokens;
+
+namespace {{NAMESPACE}}.Controllers
+{
+    [ApiController]
+    [Route("api/[controller]")]
+    public class AuthController : ControllerBase
+    {
+        private readonly IConfiguration _config;
+
+        public AuthController(IConfiguration config)
+        {
+            _config = config;
+        }
+
+        public class LoginDto
+        {
+            public string Email { get; set; } = string.Empty;
+            public string Password { get; set; } = string.Empty;
+        }
+
+        public class RegisterDto
+        {
+            public string Name { get; set; } = string.Empty;
+            public string Email { get; set; } = string.Empty;
+            public string Password { get; set; } = string.Empty;
+        }
+
+        // Demo implementation: accepts any non-empty credentials.
+        // Replace with a real user store (e.g. ASP.NET Core Identity + ApplicationDbContext).
+        [HttpPost("login")]
+        public IActionResult Login([FromBody] LoginDto dto)
+        {
+            if (string.IsNullOrWhiteSpace(dto.Email) || string.IsNullOrWhiteSpace(dto.Password))
+            {
+                return Unauthorized(new { success = false, error = "Invalid credentials" });
+            }
+
+            var token = GenerateJwtToken("1", dto.Email, dto.Email, "user");
+            return Ok(new { success = true, token });
+        }
+
+        [HttpPost("register")]
+        public IActionResult Register([FromBody] RegisterDto dto)
+        {
+            var token = GenerateJwtToken("1", dto.Name, dto.Email, "user");
+            return Ok(new { success = true, token, user = new { dto.Name, dto.Email } });
+        }
+
+        [Authorize]
+        [HttpGet("me")]
+        public IActionResult Me()
+        {
+            return Ok(new
+            {
+                success = true,
+                name = User.FindFirstValue(ClaimTypes.Name),
+                email = User.FindFirstValue(ClaimTypes.Email),
+                role = User.FindFirstValue(ClaimTypes.Role)
+            });
+        }
+
+        private string GenerateJwtToken(string id, string name, string email, string role)
+        {
+            var key = Encoding.UTF8.GetBytes(_config["Jwt:Key"]!);
+            var descriptor = new SecurityTokenDescriptor
+            {
+                Subject = new ClaimsIdentity(new[]
+                {
+                    new Claim(ClaimTypes.NameIdentifier, id),
+                    new Claim(ClaimTypes.Name, name),
+                    new Claim(ClaimTypes.Email, email),
+                    new Claim(ClaimTypes.Role, role)
+                }),
+                Expires = DateTime.UtcNow.AddDays(7),
+                SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature)
+            };
+            var handler = new JwtSecurityTokenHandler();
+            return handler.WriteToken(handler.CreateToken(descriptor));
+        }
+    }
+}

package/stacks/dotnet-core/overlays/common/Data/ApplicationDbContext.cs

@@ -0,0 +1,25 @@
+using Microsoft.EntityFrameworkCore;
+using {{NAMESPACE}}.Models;
+
+namespace {{NAMESPACE}}.Data
+{
+    public class ApplicationDbContext : DbContext
+    {
+        public ApplicationDbContext(DbContextOptions<ApplicationDbContext> options) : base(options)
+        {
+        }
+
+        public DbSet<Product> Products { get; set; }
+        {{DBCONTEXT_EXTRA}}
+
+        protected override void OnModelCreating(ModelBuilder modelBuilder)
+        {
+            base.OnModelCreating(modelBuilder);
+
+            modelBuilder.Entity<Product>().Property(p => p.Price).HasPrecision(18, 2);
+            modelBuilder.Entity<Product>().HasData(
+                new Product { Id = 1, Name = "Starter Kit", Price = 99.99m, Description = "Built with BoilerCraft Studio" }
+            );
+        }
+    }
+}

package/stacks/dotnet-core/overlays/common/Models/Product.cs

@@ -0,0 +1,19 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace {{NAMESPACE}}.Models
+{
+    public class Product
+    {
+        public int Id { get; set; }
+
+        [Required, StringLength(120)]
+        public string Name { get; set; } = string.Empty;
+
+        [Range(0, 1_000_000)]
+        [DataType(DataType.Currency)]
+        public decimal Price { get; set; }
+
+        [StringLength(1000)]
+        public string Description { get; set; } = string.Empty;
+    }
+}

package/stacks/dotnet-core/overlays/mvc/Controllers/ProductsController.cs

@@ -0,0 +1,84 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using {{NAMESPACE}}.Data;
+using {{NAMESPACE}}.Models;
+
+namespace {{NAMESPACE}}.Controllers
+{
+    {{PRODUCTS_AUTHORIZE}}
+    public class ProductsController : Controller
+    {
+        private readonly ApplicationDbContext _context;
+
+        public ProductsController(ApplicationDbContext context)
+        {
+            _context = context;
+        }
+
+        // GET: /Products
+        public async Task<IActionResult> Index()
+        {
+            return View(await _context.Products.OrderBy(p => p.Name).ToListAsync());
+        }
+
+        // GET: /Products/Create
+        public IActionResult Create()
+        {
+            return View(new Product());
+        }
+
+        // POST: /Products/Create
+        [HttpPost]
+        [ValidateAntiForgeryToken]
+        public async Task<IActionResult> Create([Bind("Name,Price,Description")] Product product)
+        {
+            if (!ModelState.IsValid) return View(product);
+            _context.Add(product);
+            await _context.SaveChangesAsync();
+            TempData["Status"] = $"\"{product.Name}\" was created.";
+            return RedirectToAction(nameof(Index));
+        }
+
+        // GET: /Products/Edit/5
+        public async Task<IActionResult> Edit(int id)
+        {
+            var product = await _context.Products.FindAsync(id);
+            return product == null ? NotFound() : View(product);
+        }
+
+        // POST: /Products/Edit/5
+        [HttpPost]
+        [ValidateAntiForgeryToken]
+        public async Task<IActionResult> Edit(int id, [Bind("Id,Name,Price,Description")] Product product)
+        {
+            if (id != product.Id) return NotFound();
+            if (!ModelState.IsValid) return View(product);
+            _context.Update(product);
+            await _context.SaveChangesAsync();
+            TempData["Status"] = $"\"{product.Name}\" was updated.";
+            return RedirectToAction(nameof(Index));
+        }
+
+        // GET: /Products/Delete/5
+        public async Task<IActionResult> Delete(int id)
+        {
+            var product = await _context.Products.FindAsync(id);
+            return product == null ? NotFound() : View(product);
+        }
+
+        // POST: /Products/Delete/5
+        [HttpPost, ActionName("Delete")]
+        [ValidateAntiForgeryToken]
+        public async Task<IActionResult> DeleteConfirmed(int id)
+        {
+            var product = await _context.Products.FindAsync(id);
+            if (product != null)
+            {
+                _context.Products.Remove(product);
+                await _context.SaveChangesAsync();
+                TempData["Status"] = $"\"{product.Name}\" was deleted.";
+            }
+            return RedirectToAction(nameof(Index));
+        }
+    }
+}

package/stacks/dotnet-core/overlays/mvc/Views/Home/Index.cshtml

@@ -0,0 +1,23 @@
+@{
+    ViewData["Title"] = "Home";
+}
+
+<div style="max-width: 900px; margin: 0 auto; text-align: center;">
+    <h1 class="display-5 fw-bold">{{APP_TITLE}}</h1>
+    <p style="color: var(--color-text-muted);">{{APP_DESC}}</p>
+
+    <div class="my-4">
+        <a asp-controller="Products" asp-action="Index" class="btn btn-primary btn-lg">Manage products →</a>
+    </div>
+
+    <div style="text-align: left; padding: 2rem; background: var(--color-surface); border: 1px solid var(--color-border); border-radius: var(--radius-base); margin-top: 2rem;">
+        <h3 style="margin-top: 0;">Active Architecture:</h3>
+        <ul>
+            <li><strong>Framework:</strong> ASP.NET Core MVC (.NET {{VERSION}})</li>
+            <li><strong>Database:</strong> {{DATABASE}} (EF Core)</li>
+            <li><strong>Theme:</strong> {{THEME}}</li>
+        </ul>
+        <hr style="border: none; border-top: 1px solid var(--color-border); margin: 1.5rem 0;" />
+        {{UI_COMPONENTS_RAZOR}}
+    </div>
+</div>

package/stacks/dotnet-core/overlays/mvc/Views/Products/Create.cshtml

@@ -0,0 +1,16 @@
+@model Product
+@{
+    ViewData["Title"] = "New product";
+}
+
+<h1 class="h3 mb-4">New product</h1>
+
+<form asp-action="Create" method="post" style="max-width: 560px;">
+    <partial name="_Form" model="Model" />
+    <button type="submit" class="btn btn-primary">Create</button>
+    <a asp-action="Index" class="btn btn-link">Cancel</a>
+</form>
+
+@section Scripts {
+    <partial name="_ValidationScriptsPartial" />
+}

package/stacks/dotnet-core/overlays/mvc/Views/Products/Delete.cshtml

@@ -0,0 +1,16 @@
+@model Product
+@{
+    ViewData["Title"] = "Delete product";
+}
+
+<h1 class="h3 mb-4">Delete product</h1>
+
+<div class="alert alert-warning" style="max-width: 560px;">
+    Delete <strong>@Model.Name</strong> (@Model.Price.ToString("0.00"))? This cannot be undone.
+</div>
+
+<form asp-action="Delete" method="post">
+    <input type="hidden" asp-for="Id" />
+    <button type="submit" class="btn btn-danger">Delete</button>
+    <a asp-action="Index" class="btn btn-link">Cancel</a>
+</form>

package/stacks/dotnet-core/overlays/mvc/Views/Products/Edit.cshtml

@@ -0,0 +1,17 @@
+@model Product
+@{
+    ViewData["Title"] = "Edit product";
+}
+
+<h1 class="h3 mb-4">Edit product</h1>
+
+<form asp-action="Edit" method="post" style="max-width: 560px;">
+    <input type="hidden" asp-for="Id" />
+    <partial name="_Form" model="Model" />
+    <button type="submit" class="btn btn-primary">Save</button>
+    <a asp-action="Index" class="btn btn-link">Cancel</a>
+</form>
+
+@section Scripts {
+    <partial name="_ValidationScriptsPartial" />
+}

package/stacks/dotnet-core/overlays/mvc/Views/Products/Index.cshtml

@@ -0,0 +1,46 @@
+@model IEnumerable<Product>
+@{
+    ViewData["Title"] = "Products";
+}
+
+<div class="d-flex justify-content-between align-items-center mb-4">
+    <h1 class="h3 mb-0">Products</h1>
+    <a asp-action="Create" class="btn btn-primary">+ New product</a>
+</div>
+
+@if (TempData["Status"] is string status)
+{
+    <div class="alert alert-success">@status</div>
+}
+
+@if (!Model.Any())
+{
+    <p class="text-muted">No products yet. <a asp-action="Create">Create the first one</a>.</p>
+}
+else
+{
+    <table class="table align-middle">
+        <thead>
+            <tr>
+                <th>@Html.DisplayNameFor(m => m.Name)</th>
+                <th class="text-end">@Html.DisplayNameFor(m => m.Price)</th>
+                <th>@Html.DisplayNameFor(m => m.Description)</th>
+                <th></th>
+            </tr>
+        </thead>
+        <tbody>
+            @foreach (var item in Model)
+            {
+                <tr>
+                    <td>@item.Name</td>
+                    <td class="text-end">@item.Price.ToString("0.00")</td>
+                    <td class="text-muted">@item.Description</td>
+                    <td class="text-end text-nowrap">
+                        <a asp-action="Edit" asp-route-id="@item.Id" class="btn btn-sm btn-outline-secondary">Edit</a>
+                        <a asp-action="Delete" asp-route-id="@item.Id" class="btn btn-sm btn-outline-danger">Delete</a>
+                    </td>
+                </tr>
+            }
+        </tbody>
+    </table>
+}

package/stacks/dotnet-core/overlays/mvc/Views/Products/_Form.cshtml

@@ -0,0 +1,19 @@
+@model Product
+
+<div asp-validation-summary="ModelOnly" class="text-danger mb-3"></div>
+
+<div class="mb-3">
+    <label asp-for="Name" class="form-label"></label>
+    <input asp-for="Name" class="form-control" autofocus />
+    <span asp-validation-for="Name" class="text-danger"></span>
+</div>
+<div class="mb-3">
+    <label asp-for="Price" class="form-label"></label>
+    <input asp-for="Price" class="form-control" step="0.01" />
+    <span asp-validation-for="Price" class="text-danger"></span>
+</div>
+<div class="mb-3">
+    <label asp-for="Description" class="form-label"></label>
+    <textarea asp-for="Description" class="form-control" rows="3"></textarea>
+    <span asp-validation-for="Description" class="text-danger"></span>
+</div>

package/stacks/dotnet-core/overlays/mvc-auth/Controllers/AccountController.cs

@@ -0,0 +1,98 @@
+using System.Security.Claims;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using {{NAMESPACE}}.Data;
+using {{NAMESPACE}}.Models;
+
+namespace {{NAMESPACE}}.Controllers
+{
+    // Cookie-based sign-in with passwords hashed by ASP.NET Core's PasswordHasher.
+    // For roles, 2FA, lockout etc. you can move to full ASP.NET Core Identity later.
+    public class AccountController : Controller
+    {
+        private readonly ApplicationDbContext _context;
+        private readonly PasswordHasher<AppUser> _hasher = new();
+
+        public AccountController(ApplicationDbContext context)
+        {
+            _context = context;
+        }
+
+        [HttpGet]
+        public IActionResult Login(string? returnUrl = null)
+        {
+            ViewData["ReturnUrl"] = returnUrl;
+            return View(new LoginViewModel());
+        }
+
+        [HttpPost]
+        [ValidateAntiForgeryToken]
+        public async Task<IActionResult> Login(LoginViewModel model, string? returnUrl = null)
+        {
+            ViewData["ReturnUrl"] = returnUrl;
+            if (!ModelState.IsValid) return View(model);
+
+            var user = await _context.Users.SingleOrDefaultAsync(u => u.Email == model.Email);
+            if (user == null || _hasher.VerifyHashedPassword(user, user.PasswordHash, model.Password) == PasswordVerificationResult.Failed)
+            {
+                ModelState.AddModelError(string.Empty, "Invalid email or password.");
+                return View(model);
+            }
+
+            await SignInAsync(user, model.RememberMe);
+            return Url.IsLocalUrl(returnUrl) ? Redirect(returnUrl!) : RedirectToAction("Index", "Home");
+        }
+
+        [HttpGet]
+        public IActionResult Register()
+        {
+            return View(new RegisterViewModel());
+        }
+
+        [HttpPost]
+        [ValidateAntiForgeryToken]
+        public async Task<IActionResult> Register(RegisterViewModel model)
+        {
+            if (!ModelState.IsValid) return View(model);
+
+            if (await _context.Users.AnyAsync(u => u.Email == model.Email))
+            {
+                ModelState.AddModelError(nameof(model.Email), "An account with this email already exists.");
+                return View(model);
+            }
+
+            var user = new AppUser { Name = model.Name, Email = model.Email };
+            user.PasswordHash = _hasher.HashPassword(user, model.Password);
+            _context.Users.Add(user);
+            await _context.SaveChangesAsync();
+
+            await SignInAsync(user, isPersistent: false);
+            return RedirectToAction("Index", "Home");
+        }
+
+        [HttpPost]
+        [ValidateAntiForgeryToken]
+        public async Task<IActionResult> Logout()
+        {
+            await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+            return RedirectToAction("Index", "Home");
+        }
+
+        private Task SignInAsync(AppUser user, bool isPersistent)
+        {
+            var claims = new List<Claim>
+            {
+                new(ClaimTypes.NameIdentifier, user.Id.ToString()),
+                new(ClaimTypes.Name, user.Name),
+                new(ClaimTypes.Email, user.Email),
+                new(ClaimTypes.Role, user.Role)
+            };
+            var principal = new ClaimsPrincipal(new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme));
+            return HttpContext.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, principal,
+                new AuthenticationProperties { IsPersistent = isPersistent });
+        }
+    }
+}

package/stacks/dotnet-core/overlays/mvc-auth/Models/AppUser.cs

@@ -0,0 +1,48 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace {{NAMESPACE}}.Models
+{
+    public class AppUser
+    {
+        public int Id { get; set; }
+
+        [Required, StringLength(100)]
+        public string Name { get; set; } = string.Empty;
+
+        [Required, EmailAddress, StringLength(256)]
+        public string Email { get; set; } = string.Empty;
+
+        [Required]
+        public string PasswordHash { get; set; } = string.Empty;
+
+        [StringLength(20)]
+        public string Role { get; set; } = "user";
+    }
+
+    public class LoginViewModel
+    {
+        [Required, EmailAddress]
+        public string Email { get; set; } = string.Empty;
+
+        [Required, DataType(DataType.Password)]
+        public string Password { get; set; } = string.Empty;
+
+        [Display(Name = "Remember me")]
+        public bool RememberMe { get; set; }
+    }
+
+    public class RegisterViewModel
+    {
+        [Required, StringLength(100)]
+        public string Name { get; set; } = string.Empty;
+
+        [Required, EmailAddress]
+        public string Email { get; set; } = string.Empty;
+
+        [Required, StringLength(100, MinimumLength = 8), DataType(DataType.Password)]
+        public string Password { get; set; } = string.Empty;
+
+        [Required, DataType(DataType.Password), Compare(nameof(Password)), Display(Name = "Confirm password")]
+        public string ConfirmPassword { get; set; } = string.Empty;
+    }
+}

package/stacks/dotnet-core/overlays/mvc-auth/Views/Account/Login.cshtml

@@ -0,0 +1,35 @@
+@model LoginViewModel
+@{
+    ViewData["Title"] = "Log in";
+}
+
+<div style="max-width: 420px; margin: 2rem auto;">
+    <h1 class="h3 mb-4">Log in</h1>
+
+    <form asp-action="Login" asp-route-returnUrl="@ViewData["ReturnUrl"]" method="post">
+        <div asp-validation-summary="ModelOnly" class="text-danger mb-3"></div>
+
+        <div class="mb-3">
+            <label asp-for="Email" class="form-label"></label>
+            <input asp-for="Email" class="form-control" autocomplete="username" autofocus />
+            <span asp-validation-for="Email" class="text-danger"></span>
+        </div>
+        <div class="mb-3">
+            <label asp-for="Password" class="form-label"></label>
+            <input asp-for="Password" class="form-control" autocomplete="current-password" />
+            <span asp-validation-for="Password" class="text-danger"></span>
+        </div>
+        <div class="form-check mb-3">
+            <input asp-for="RememberMe" class="form-check-input" />
+            <label asp-for="RememberMe" class="form-check-label"></label>
+        </div>
+
+        <button type="submit" class="btn btn-primary w-100">Log in</button>
+    </form>
+
+    <p class="mt-3 text-center">No account? <a asp-action="Register">Create one</a></p>
+</div>
+
+@section Scripts {
+    <partial name="_ValidationScriptsPartial" />
+}

package/stacks/dotnet-core/overlays/mvc-auth/Views/Account/Register.cshtml

@@ -0,0 +1,41 @@
+@model RegisterViewModel
+@{
+    ViewData["Title"] = "Create account";
+}
+
+<div style="max-width: 420px; margin: 2rem auto;">
+    <h1 class="h3 mb-4">Create account</h1>
+
+    <form asp-action="Register" method="post">
+        <div asp-validation-summary="ModelOnly" class="text-danger mb-3"></div>
+
+        <div class="mb-3">
+            <label asp-for="Name" class="form-label"></label>
+            <input asp-for="Name" class="form-control" autocomplete="name" autofocus />
+            <span asp-validation-for="Name" class="text-danger"></span>
+        </div>
+        <div class="mb-3">
+            <label asp-for="Email" class="form-label"></label>
+            <input asp-for="Email" class="form-control" autocomplete="username" />
+            <span asp-validation-for="Email" class="text-danger"></span>
+        </div>
+        <div class="mb-3">
+            <label asp-for="Password" class="form-label"></label>
+            <input asp-for="Password" class="form-control" autocomplete="new-password" />
+            <span asp-validation-for="Password" class="text-danger"></span>
+        </div>
+        <div class="mb-3">
+            <label asp-for="ConfirmPassword" class="form-label"></label>
+            <input asp-for="ConfirmPassword" class="form-control" autocomplete="new-password" />
+            <span asp-validation-for="ConfirmPassword" class="text-danger"></span>
+        </div>
+
+        <button type="submit" class="btn btn-primary w-100">Create account</button>
+    </form>
+
+    <p class="mt-3 text-center">Already registered? <a asp-action="Login">Log in</a></p>
+</div>
+
+@section Scripts {
+    <partial name="_ValidationScriptsPartial" />
+}

package/stacks/dotnet-core/overlays/mvc-auth/Views/Shared/_AuthNav.cshtml

@@ -0,0 +1,22 @@
+<ul class="navbar-nav">
+    @if (User.Identity?.IsAuthenticated == true)
+    {
+        <li class="nav-item">
+            <span class="nav-link text-dark">Hello, @User.Identity.Name</span>
+        </li>
+        <li class="nav-item">
+            <form asp-controller="Account" asp-action="Logout" method="post" class="d-inline">
+                <button type="submit" class="nav-link btn btn-link text-dark">Log out</button>
+            </form>
+        </li>
+    }
+    else
+    {
+        <li class="nav-item">
+            <a class="nav-link text-dark" asp-controller="Account" asp-action="Login">Log in</a>
+        </li>
+        <li class="nav-item">
+            <a class="nav-link text-dark" asp-controller="Account" asp-action="Register">Register</a>
+        </li>
+    }
+</ul>

package/stacks/dotnet-core/snippets/packages-auth.xml

@@ -0,0 +1,4 @@
+  <ItemGroup>
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="{{VERSION}}.0.*" />
+  </ItemGroup>
+

package/stacks/dotnet-core/snippets/packages-common.xml

@@ -0,0 +1,5 @@
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="{{VERSION}}.0.*" />
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="{{SWASHBUCKLE_VERSION}}" />
+  </ItemGroup>
+

package/stacks/dotnet-core/snippets/packages-ef.xml

@@ -0,0 +1,4 @@
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="{{VERSION}}.0.*" />
+  </ItemGroup>
+

package/stacks/dotnet-core/snippets/packages-mssql.xml

@@ -0,0 +1,4 @@
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="{{VERSION}}.0.*" />
+  </ItemGroup>
+

package/stacks/dotnet-core/snippets/packages-mysql.xml

@@ -0,0 +1,4 @@
+  <ItemGroup>
+    <PackageReference Include="Pomelo.EntityFrameworkCore.MySql" Version="{{VERSION}}.0.*" />
+  </ItemGroup>
+

package/stacks/dotnet-core/snippets/packages-swagger.xml

@@ -0,0 +1,4 @@
+  <ItemGroup>
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="{{SWASHBUCKLE_VERSION}}" />
+  </ItemGroup>
+