feat: add demo data seeding for development

Author: Diogo-Ferraz

.env.example

@@ -6,3 +6,4 @@ POSTGRES_PASSWORD=postgres
 # Development defaults used by docker-compose.override.yml
 OPENIDDICT_ENCRYPTION_KEY=DRjd/GnduI3Efzen9V9BvbNUfc/VKgXltV7Kbk9sMkY=
 SWAGGER_CLIENT_SECRET=901564A5-E7FE-42CB-B10D-61EF6A8F3654
+DEMO_PASSWORD=Demo123!

README.md

@@ -176,6 +176,20 @@ docker compose up --build
 
 This starts PostgreSQL, Auth, API, and Caddy with local HTTPS routing.
 
+### Trust local Caddy certificate (one-time)
+
+macOS:
+
+```bash
+./scripts/setup-local-trust.sh
+```
+
+Windows (PowerShell as Administrator):
+
+```powershell
+./scripts/setup-local-trust.ps1
+```
+
 ---
 
 ## Testing

TaskManagementServer.sln

@@ -21,7 +21,8 @@ Project("{E53339B2-1760-4266-BCC7-CA923CBCF16C}") = "docker-compose", "docker-co
 EndProject
 Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "scripts", "scripts", "{86A03EC8-9DCB-4B52-BE83-DA02C59E8593}"
 	ProjectSection(SolutionItems) = preProject
-		scripts\create-database.sql = scripts\create-database.sql
+		scripts\setup-local-trust.ps1 = scripts\setup-local-trust.ps1
+		scripts\setup-local-trust.sh = scripts\setup-local-trust.sh
 	EndProjectSection
 EndProject
 Global

docker-compose.override.yml

@@ -11,6 +11,8 @@ services:
       - OpenIddict__Issuer=https://auth.localhost
       - OpenIddict__Audience=task_management_api_dev
       - OpenIddict__EncryptionKey=${OPENIDDICT_ENCRYPTION_KEY:-DRjd/GnduI3Efzen9V9BvbNUfc/VKgXltV7Kbk9sMkY=}
+      - DemoData__Enabled=true
+      - DemoData__DefaultPassword=${DEMO_PASSWORD:-Demo123!}
       - ClientSettings__Clients__0__ClientId=swagger-client
       - ClientSettings__Clients__0__ClientSecret=${SWAGGER_CLIENT_SECRET:-901564A5-E7FE-42CB-B10D-61EF6A8F3654}
       - ClientSettings__Clients__0__DisplayName=Swagger Client application
@@ -21,18 +23,6 @@ services:
       - ClientSettings__Clients__0__AllowedCorsOrigins__2=https://localhost:8081
       - ClientSettings__Clients__0__AllowedScopes__0=api1
       - ClientSettings__Clients__0__RequirePkce=true
-      - SeedUsers__0__Email=demo-admin@example.com
-      - SeedUsers__0__DisplayName=Demo Admin
-      - SeedUsers__0__Password=Demo123!
-      - SeedUsers__0__Role=Administrator
-      - SeedUsers__1__Email=demo-manager@example.com
-      - SeedUsers__1__DisplayName=Demo Manager
-      - SeedUsers__1__Password=Demo123!
-      - SeedUsers__1__Role=ProjectManager
-      - SeedUsers__2__Email=demo-user@example.com
-      - SeedUsers__2__DisplayName=Demo User
-      - SeedUsers__2__Password=Demo123!
-      - SeedUsers__2__Role=User
 
   api-service:
     extra_hosts:
@@ -44,6 +34,7 @@ services:
       - OpenIddict__Issuer=https://auth.localhost
       - OpenIddict__Audience=task_management_api_dev
       - OpenIddict__EncryptionKey=${OPENIDDICT_ENCRYPTION_KEY:-DRjd/GnduI3Efzen9V9BvbNUfc/VKgXltV7Kbk9sMkY=}
+      - DemoData__Enabled=true
       - AuthApi__BaseUrl=https://auth.localhost/
       - ClientSettings__AuthorizationUrl=https://auth.localhost/connect/authorize
       - ClientSettings__TokenUrl=https://auth.localhost/connect/token

scripts/create-database.sql

@@ -0,0 +1,37 @@
+param(
+    [string]$ContainerName = "caddy-prox",
+    [string]$CertOutputPath = "$env:TEMP\caddy-local-root.crt"
+)
+
+$ErrorActionPreference = "Stop"
+
+function Ensure-Command {
+    param([string]$Name)
+    if (-not (Get-Command $Name -ErrorAction SilentlyContinue)) {
+        throw "Required command '$Name' was not found in PATH."
+    }
+}
+
+Ensure-Command docker
+Ensure-Command certutil
+
+Write-Host "Ensuring Caddy container is running..."
+docker compose up -d caddy | Out-Null
+
+$running = docker ps --format '{{.Names}}' | Select-String -SimpleMatch $ContainerName
+if (-not $running) {
+    Write-Host "Container '$ContainerName' is not running. Start stack first:"
+    Write-Host "  docker compose up -d --build"
+    exit 1
+}
+
+Write-Host "Exporting Caddy local root certificate..."
+docker cp "$ContainerName`:/data/caddy/pki/authorities/local/root.crt" "$CertOutputPath"
+
+Write-Host "Installing certificate into Windows Trusted Root Certification Authorities..."
+certutil -addstore -f "Root" "$CertOutputPath" | Out-Null
+
+Write-Host "Certificate installed successfully."
+Write-Host "Restart your browser and open:"
+Write-Host "  https://api.localhost/health"
+Write-Host "  https://auth.localhost"

scripts/setup-local-trust.ps1

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${OSTYPE:-}" != darwin* ]]; then
+  echo "This helper currently supports macOS only."
+  echo "For other OSes, trust Caddy local CA from: /data/caddy/pki/authorities/local/root.crt"
+  exit 1
+fi
+
+if ! command -v docker >/dev/null 2>&1; then
+  echo "Docker is not installed or not available in PATH."
+  exit 1
+fi
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+server_dir="$(cd "${script_dir}/.." && pwd)"
+cert_path="/tmp/caddy-local-root.crt"
+container_name="caddy-prox"
+
+echo "Ensuring Caddy container is running..."
+(
+  cd "${server_dir}"
+  docker compose up -d caddy >/dev/null
+)
+
+if ! docker ps --format '{{.Names}}' | grep -qx "${container_name}"; then
+  echo "Could not find running container '${container_name}'."
+  echo "Start the stack first with: docker compose up -d --build"
+  exit 1
+fi
+
+echo "Exporting Caddy local root certificate..."
+docker cp "${container_name}:/data/caddy/pki/authorities/local/root.crt" "${cert_path}"
+
+echo "Installing certificate into macOS System keychain (sudo required)..."
+sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "${cert_path}"
+
+echo "Certificate installed successfully."
+echo "Restart your browser and open:"
+echo "  https://api.localhost/health"
+echo "  https://auth.localhost"

scripts/setup-local-trust.sh

@@ -1,5 +1,6 @@
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Configuration;
+using TaskManagement.Api.Infrastructure.Persistence.Seeding;
 
 namespace TaskManagement.Api.Infrastructure.Persistence.Configuration
 {
@@ -61,6 +62,11 @@ public static async Task ApplyMigrationsAsync(this WebApplication app)
             {
                 logger.LogError(ex, "Migration error in API service");
             }
+
+            if (app.Environment.IsDevelopment())
+            {
+                await services.SeedDemoDataAsync(logger);
+            }
         }
     }
 }