using Microsoft.Extensions.Options;

namespace ZB.MOM.WW.OtOpcUa.Security.Jwt;

/// <summary>
///     Startup validator for <see cref="JwtOptions"/> (R03:2.4): when a signing key is configured it must
///     be usable, and the host must learn that at start (<c>ValidateOnStart</c>) rather than from an HTTP 500
///     on the first <c>/auth/token</c>. An unconfigured section (no key) is valid — the feature is simply off.
/// </summary>
public sealed class JwtOptionsValidator : IValidateOptions<JwtOptions>
{
    /// <inheritdoc />
    public ValidateOptionsResult Validate(string? name, JwtOptions options)
    {
        ArgumentNullException.ThrowIfNull(options);
        var failure = options.Validate();
        return failure is null ? ValidateOptionsResult.Success : ValidateOptionsResult.Fail(failure);
    }
}