Program.cs

using FitEasy.API.Data;
using FitEasy.API.Interfaces.Login;
using FitEasy.API.Interfaces.Security;
using FitEasy.API.Repositories.Login;
using FitEasy.API.Services.Login;
using FitEasy.API.Services.Security;
using FitEasy.API.Settings;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.EntityFrameworkCore;
using Microsoft.IdentityModel.Tokens;
using System.Text;

var builder = WebApplication.CreateBuilder(args);

// DbContext
builder.Services.AddDbContext<AppDbContext>(options =>
    options.UseNpgsql(builder.Configuration.GetConnectionString("DefaultConnection")));

// DI
builder.Services.AddScoped<IUserRepository, UserRepository>();
builder.Services.AddSingleton<IPasswordEncryptor>(sp =>
{
    var config = sp.GetRequiredService<IConfiguration>();
    var aes = config.GetSection("Aes");
    var key = aes["Key"];
    var iv = aes["IV"];
    if (string.IsNullOrWhiteSpace(key) || string.IsNullOrWhiteSpace(iv))
        throw new InvalidOperationException("As configurações 'Aes:Key' e 'Aes:IV' são obrigatórias.");
    return new AesPasswordEncryptor(key, iv);
});
builder.Services.AddScoped<ILoginService, LoginService>();

builder.Services.Configure<JwtSettings>(builder.Configuration.GetSection("Jwt"));

var jwtSection = builder.Configuration.GetSection("Jwt");
var key = Encoding.UTF8.GetBytes(jwtSection["Key"]!);

builder.Services
    .AddAuthentication(opt =>
    {
        opt.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
        opt.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
    })
    .AddJwtBearer(opt =>
    {
        opt.RequireHttpsMetadata = false;
        opt.SaveToken = true;
        opt.TokenValidationParameters = new()
        {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = jwtSection["Issuer"],
            ValidAudience = jwtSection["Audience"],
            IssuerSigningKey = new SymmetricSecurityKey(key),
            ClockSkew = TimeSpan.Zero
        };
    });

builder.Services.AddAuthorization();

builder.Services.AddCors(options =>
{
    options.AddPolicy("AllowAngularOrigin", policy =>
    {
        policy.WithOrigins("http://localhost:4200", "http://100.79.151.95:4200", "http://100.79.151.95")
              .AllowAnyMethod()
              .AllowAnyHeader();
    });
});

builder.Services.AddControllers();
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen(c =>
{
    c.SwaggerDoc("v1", new Microsoft.OpenApi.Models.OpenApiInfo
    {
        Version = "v1",
        Title = "FitEasy.API",
        Description = "API para FitEasy",
    });
    c.EnableAnnotations();
});

var app = builder.Build();

if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI(c =>
    {
        c.SwaggerEndpoint("/swagger/v1/swagger.json", "FitEasy.API v1");
    });
}

//app.UseHttpsRedirection();

// Se não tiver HTTPS configurado, pode comentar a linha acima temporariamente.
// app.UseHttpsRedirection();

app.UseCors("AllowAngularOrigin");
app.UseAuthentication();
app.UseAuthorization();

// LINHA CRÍTICA QUE FALTAVA
app.MapControllers();

app.Run();