feat: Implement file management and authorization features

- Add RequiresPermissionAttribute for gRPC method access control.
- Create IFileManagementService interface for file upload and management.
- Implement AddProductImageCommand and handler for adding product images.
- Implement CreateNewProductsCommand and handler for creating new products with image uploads.
- Implement DeleteProductsCommand and handler for deleting products and their associations.
- Implement RemoveProductImageCommand and handler for removing product images from galleries.
- Implement UpdateProductsCommand and handler for updating product details and images.
- Create GetProductGalleryQuery and handler for retrieving product galleries.
- Implement PermissionService for role-based access control using JWT claims.
- Implement FileManagementService for handling file uploads and image optimization.
- Define gRPC service and messages for file management in fms.proto.
- Add FluentValidation for request validation in various commands.
- Create PermissionInterceptor for enforcing permissions on gRPC methods.

src/CMSMicroservice.WebApi/Services/PackageService.cs

@@ -13,11 +13,14 @@ using CMSMicroservice.Application.PackageCQ.Queries.GetUserPackageStatus;
 using CMSMicroservice.Application.PackageCQ.Queries.GetCustomerPackages;
 using CMSMicroservice.Application.PackageCQ.Queries.GetCustomerPackageDetails;
 using CMSMicroservice.Application.PackageCQ.Queries.GetCustomerPurchaseHistory;
+using CMSMicroservice.Application.Common.Interfaces;
 using AppModels = CMSMicroservice.Application.Common.Models;
 using Grpc.Core;
 using Google.Protobuf.WellKnownTypes;
 using System.Collections.Generic;
+using System.Linq;
 using CMSMicroservice.Protobuf.Protos;
+using Microsoft.EntityFrameworkCore;
 using MediatR;
 using Mapster;
 
@@ -26,11 +29,22 @@ public class PackageService : PackageContract.PackageContractBase
 {
     private readonly IDispatchRequestToCQRS _dispatchRequestToCQRS;
     private readonly ISender _sender;
+    private readonly IApplicationDbContext _context;
+    private readonly ICurrentUserService _currentUserService;
+    private readonly IPaymentGatewayService _paymentGateway;
 
-    public PackageService(IDispatchRequestToCQRS dispatchRequestToCQRS, ISender sender)
+    public PackageService(
+        IDispatchRequestToCQRS dispatchRequestToCQRS, 
+        ISender sender,
+        IApplicationDbContext context,
+        ICurrentUserService currentUserService,
+        IPaymentGatewayService paymentGateway)
     {
         _dispatchRequestToCQRS = dispatchRequestToCQRS;
         _sender = sender;
+        _context = context;
+        _currentUserService = currentUserService;
+        _paymentGateway = paymentGateway;
     }
     public override async Task<CreateNewPackageResponse> CreateNewPackage(CreateNewPackageRequest request, ServerCallContext context)
     {
@@ -142,45 +156,161 @@ public class PackageService : PackageContract.PackageContractBase
     
     public override async Task<CustomerPurchasePackageResponse> CustomerPurchasePackage(CustomerPurchasePackageRequest request, ServerCallContext context)
     {
-        // Mock Customer package purchase with realistic Persian response
-        var orderId = DateTimeOffset.UtcNow.ToUnixTimeSeconds();
-        var authority = "A" + orderId.ToString("D19");
+        var userId = GetCurrentUserId();
+        
+        // Lookup package
+        var package = await _context.Packages
+            .AsNoTracking()
+            .Where(p => p.Id == request.PackageId && !p.IsDeleted)
+            .FirstOrDefaultAsync(context.CancellationToken);
+        
+        if (package == null)
+            throw new RpcException(new Status(StatusCode.NotFound, "پکیج مورد نظر یافت نشد"));
+        
+        // Create transaction
+        var transaction = new CMSMicroservice.Domain.Entities.Transaction
+        {
+            Amount = package.Price,
+            Description = $"خرید پکیج {package.Title}",
+            PaymentStatus = Domain.Enums.PaymentStatus.Pending,
+            Type = Domain.Enums.TransactionType.Buy
+        };
+        _context.Transactions.Add(transaction);
+        await _context.SaveChangesAsync(context.CancellationToken);
+        
+        // Create purchase record
+        var purchaseMethod = request.PurchaseMethod == PurchaseMethodEnum.PurchaseMethodGateway 
+            ? Domain.Enums.PackagePurchaseMethod.DirectPurchase 
+            : Domain.Enums.PackagePurchaseMethod.DayaLoan;
+        
+        var purchase = new CMSMicroservice.Domain.Entities.UserPackagePurchase
+        {
+            UserId = userId,
+            PackageId = package.Id,
+            PurchaseMethod = purchaseMethod,
+            PurchasedAt = DateTime.UtcNow,
+            Amount = package.Price,
+            TransactionId = transaction.Id
+        };
+        _context.UserPackagePurchases.Add(purchase);
+        await _context.SaveChangesAsync(context.CancellationToken);
+        
+        // Initiate payment with gateway
+        var user = await _context.Users
+            .AsNoTracking()
+            .Where(u => u.Id == userId)
+            .Select(u => new { u.Mobile })
+            .FirstOrDefaultAsync(context.CancellationToken);
+        
+        var paymentResult = await _paymentGateway.InitiatePaymentAsync(new PaymentRequest
+        {
+            Amount = package.Price,
+            UserId = userId,
+            Mobile = user?.Mobile ?? string.Empty,
+            Description = $"خرید پکیج {package.Title}",
+            CallbackUrl = request.CallbackUrl
+        }, context.CancellationToken);
+        
+        if (!paymentResult.IsSuccess)
+        {
+            transaction.PaymentStatus = Domain.Enums.PaymentStatus.Reject;
+            await _context.SaveChangesAsync(context.CancellationToken);
+            
+            return new CustomerPurchasePackageResponse
+            {
+                Success = false,
+                Message = paymentResult.ErrorMessage ?? "خطا در ارتباط با درگاه پرداخت"
+            };
+        }
+        
+        // Save RefId
+        transaction.RefId = paymentResult.RefId;
+        await _context.SaveChangesAsync(context.CancellationToken);
         
         return new CustomerPurchasePackageResponse
         {
             Success = true,
             Message = "درخواست خرید پکیج با موفقیت ثبت شد",
-            OrderId = orderId,
-            PaymentGatewayUrl = $"https://payment.gateway.com/payment?authority={authority}&amount=5600000",
-            Authority = authority
+            OrderId = purchase.Id,
+            PaymentGatewayUrl = paymentResult.GatewayUrl ?? string.Empty,
+            Authority = paymentResult.RefId ?? string.Empty
         };
     }
     
     public override async Task<CustomerVerifyPackagePurchaseResponse> CustomerVerifyPackagePurchase(CustomerVerifyPackagePurchaseRequest request, ServerCallContext context)
     {
-        // Mock Customer purchase verification with realistic Persian data
-        var transactionId = DateTimeOffset.UtcNow.ToUnixTimeSeconds();
-        var referenceCode = "REF" + transactionId.ToString();
+        // Find purchase record
+        var purchase = await _context.UserPackagePurchases
+            .Include(p => p.Package)
+            .Where(p => p.Id == request.OrderId && !p.IsDeleted)
+            .FirstOrDefaultAsync(context.CancellationToken);
         
-        var isSuccessful = request.Status == "OK";
+        if (purchase == null)
+            throw new RpcException(new Status(StatusCode.NotFound, "سفارش یافت نشد"));
+        
+        // Find the associated transaction
+        var transaction = purchase.TransactionId.HasValue
+            ? await _context.Transactions
+                .Where(t => t.Id == purchase.TransactionId.Value)
+                .FirstOrDefaultAsync(context.CancellationToken)
+            : null;
+        
+        // If status from gateway callback is not OK
+        if (request.Status != "OK")
+        {
+            if (transaction != null)
+            {
+                transaction.PaymentStatus = Domain.Enums.PaymentStatus.Reject;
+                await _context.SaveChangesAsync(context.CancellationToken);
+            }
+            
+            return new CustomerVerifyPackagePurchaseResponse
+            {
+                Success = false,
+                Message = "پرداخت توسط کاربر لغو شد"
+            };
+        }
+        
+        // Verify with payment gateway
+        var verifyResult = await _paymentGateway.VerifyPaymentAsync(
+            request.Authority, request.Status, context.CancellationToken);
+        
+        if (verifyResult.IsSuccess && transaction != null)
+        {
+            transaction.PaymentStatus = Domain.Enums.PaymentStatus.Success;
+            transaction.PaymentDate = DateTime.UtcNow;
+            transaction.RefId = verifyResult.RefId;
+        }
+        else if (transaction != null)
+        {
+            transaction.PaymentStatus = Domain.Enums.PaymentStatus.Reject;
+        }
+        
+        await _context.SaveChangesAsync(context.CancellationToken);
         
         return new CustomerVerifyPackagePurchaseResponse
         {
-            Success = isSuccessful,
-            Message = isSuccessful ? "خرید پکیج با موفقیت تایید شد" : "خرید پکیج ناموفق بود",
-            TransactionId = transactionId,
-            ReferenceCode = referenceCode,
-            PurchaseInfo = isSuccessful ? new PackagePurchaseInfo
+            Success = verifyResult.IsSuccess,
+            Message = verifyResult.IsSuccess ? "خرید پکیج با موفقیت تایید شد" : (verifyResult.Message ?? "خرید پکیج ناموفق بود"),
+            TransactionId = transaction?.Id ?? 0,
+            ReferenceCode = verifyResult.RefId ?? string.Empty,
+            PurchaseInfo = verifyResult.IsSuccess ? new PackagePurchaseInfo
             {
-                PackageId = 1,
-                PackageName = "پکیج طلایی",
-                AmountPaid = 5600000,
-                PurchaseDate = Timestamp.FromDateTime(DateTime.UtcNow),
-                ExpiryDate = Timestamp.FromDateTime(DateTime.UtcNow.AddDays(365))
+                PackageId = purchase.PackageId,
+                PackageName = purchase.Package?.Title ?? string.Empty,
+                AmountPaid = purchase.Amount,
+                PurchaseDate = Timestamp.FromDateTime(DateTime.SpecifyKind(purchase.PurchasedAt, DateTimeKind.Utc))
             } : null
         };
     }
     
+    private long GetCurrentUserId()
+    {
+        if (long.TryParse(_currentUserService.UserId, out var userId) && userId > 0)
+            return userId;
+        throw new RpcException(new Status(StatusCode.Unauthenticated, "لطفاً وارد حساب کاربری خود شوید"));
+    }
+    
     public override async Task<GetCustomerPurchaseHistoryResponse> GetCustomerPurchaseHistory(GetCustomerPurchaseHistoryRequest request, ServerCallContext context)
     {
         var query = new GetCustomerPurchaseHistoryQuery