Comprehensive comparison for Authentication technology in Software Development applications

using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Identity.Web;
using Microsoft.Identity.Web.Resource;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Security.Claims;
using System.Threading.Tasks;

namespace ProductApi.Controllers
{
    /// <summary>
    /// Product API Controller protected by Azure AD authentication
    /// </summary>
    [ApiController]
    [Route("api/[controller]")]
    [Authorize]
    public class ProductsController : ControllerBase
    {
        private readonly ILogger<ProductsController> _logger;
        private static readonly string[] RequiredScopes = new[] { "Products.Read", "Products.Write" };

        public ProductsController(ILogger<ProductsController> logger)
        {
            _logger = logger ?? throw new ArgumentNullException(nameof(logger));
        }

        /// <summary>
        /// Get all products - requires Products.Read scope
        /// </summary>
        [HttpGet]
        [RequiredScope("Products.Read")]
        public async Task<ActionResult<IEnumerable<Product>>> GetProducts()
        {
            try
            {
                var userId = GetCurrentUserId();
                var userEmail = GetCurrentUserEmail();
                
                _logger.LogInformation($"User {userEmail} (ID: {userId}) retrieving products");

                // Simulate data retrieval
                var products = await Task.FromResult(new List<Product>
                {
                    new Product { Id = 1, Name = "Laptop", Price = 999.99m },
                    new Product { Id = 2, Name = "Mouse", Price = 29.99m }
                });

                return Ok(products);
            }
            catch (Exception ex)
            {
                _logger.LogError(ex, "Error retrieving products");
                return StatusCode(500, "An error occurred while processing your request");
            }
        }

        /// <summary>
        /// Create a new product - requires Products.Write scope
        /// </summary>
        [HttpPost]
        [RequiredScope("Products.Write")]
        public async Task<ActionResult<Product>> CreateProduct([FromBody] Product product)
        {
            try
            {
                if (product == null || string.IsNullOrEmpty(product.Name))
                {
                    return BadRequest("Invalid product data");
                }

                var userId = GetCurrentUserId();
                var roles = GetCurrentUserRoles();

                // Check if user has admin role for additional validation
                if (!roles.Contains("Admin") && product.Price > 10000)
                {
                    _logger.LogWarning($"User {userId} attempted to create high-value product without admin role");
                    return Forbid();
                }

                _logger.LogInformation($"User {userId} creating product: {product.Name}");
                
                // Simulate product creation
                product.Id = new Random().Next(1000, 9999);
                await Task.CompletedTask;

                return CreatedAtAction(nameof(GetProducts), new { id = product.Id }, product);
            }
            catch (Exception ex)
            {
                _logger.LogError(ex, "Error creating product");
                return StatusCode(500, "An error occurred while creating the product");
            }
        }

        private string GetCurrentUserId()
        {
            return User.FindFirst(ClaimTypes.NameIdentifier)?.Value 
                ?? User.FindFirst("oid")?.Value 
                ?? "unknown";
        }

        private string GetCurrentUserEmail()
        {
            return User.FindFirst(ClaimTypes.Email)?.Value 
                ?? User.FindFirst("preferred_username")?.Value 
                ?? "unknown";
        }

        private List<string> GetCurrentUserRoles()
        {
            return User.FindAll(ClaimTypes.Role)
                .Select(c => c.Value)
                .ToList();
        }
    }

    public class Product
    {
        public int Id { get; set; }
        public string Name { get; set; }
        public decimal Price { get; set; }
    }
}