[WIP] Implement Zitadel IDP

CommunityToolkit.Aspire.sln

@@ -365,6 +365,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CommunityToolkit.Aspire.Hos
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CommunityToolkit.Aspire.Hosting.Dapr", "src\CommunityToolkit.Aspire.Hosting.Dapr\CommunityToolkit.Aspire.Hosting.Dapr.csproj", "{27144ED2-9F74-4A86-AABA-38CD061D8984}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CommunityToolkit.Aspire.Hosting.Zitadel", "src\CommunityToolkit.Aspire.Hosting.Zitadel\CommunityToolkit.Aspire.Hosting.Zitadel.csproj", "{35C570A9-8109-4DE0-8F67-B665DF56BE2B}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -955,6 +957,10 @@ Global
 		{27144ED2-9F74-4A86-AABA-38CD061D8984}.Debug|Any CPU.Build.0 = Debug|Any CPU
 		{27144ED2-9F74-4A86-AABA-38CD061D8984}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{27144ED2-9F74-4A86-AABA-38CD061D8984}.Release|Any CPU.Build.0 = Release|Any CPU
+		{35C570A9-8109-4DE0-8F67-B665DF56BE2B}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{35C570A9-8109-4DE0-8F67-B665DF56BE2B}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{35C570A9-8109-4DE0-8F67-B665DF56BE2B}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{35C570A9-8109-4DE0-8F67-B665DF56BE2B}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
@@ -1138,6 +1144,7 @@ Global
 		{72652F7E-CFC0-4E3D-AD96-74C206A110BA} = {41ACF613-EE5A-5900-F4D1-9FB713A32BE8}
 		{92D490BC-B953-45DC-8F9D-A992B2AEF96A} = {41ACF613-EE5A-5900-F4D1-9FB713A32BE8}
 		{27144ED2-9F74-4A86-AABA-38CD061D8984} = {41ACF613-EE5A-5900-F4D1-9FB713A32BE8}
+		{35C570A9-8109-4DE0-8F67-B665DF56BE2B} = {414151D4-7009-4E78-A5C6-D99EBD1E67D1}
 	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		SolutionGuid = {08B1D4B8-D2C5-4A64-BB8B-E1A2B29525F0}

src/CommunityToolkit.Aspire.Hosting.Zitadel/CommunityToolkit.Aspire.Hosting.Zitadel.csproj

@@ -0,0 +1,13 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <AdditionalPackageTags>Zitadel</AdditionalPackageTags>
+    <Description>Provides Zitadel IDP integration for Aspire.</Description>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Aspire.Hosting" />
+    <PackageReference Include="Zitadel" />
+  </ItemGroup>
+
+</Project>

src/CommunityToolkit.Aspire.Hosting.Zitadel/ZitadelContainerImageTags.cs

@@ -0,0 +1,22 @@
+namespace CommunityToolkit.Aspire.Hosting.Zitadel;
+
+/// <summary>
+/// Contains strings which describes the Zitadel container registry.
+/// </summary>
+internal static class ZitadelContainerImageTags
+{
+    /// <summary>
+    /// ghcr.io
+    /// </summary>
+    public const string Registry = "ghcr.io";
+
+    /// <summary>
+    /// zitadel/zitadel
+    /// </summary>
+    public const string Image = "zitadel/zitadel";
+
+    /// <summary>
+    /// latest
+    /// </summary>
+    public const string Tag = "latest";
+}

src/CommunityToolkit.Aspire.Hosting.Zitadel/ZitadelResource.cs

@@ -0,0 +1,38 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Aspire.Hosting;
+using Aspire.Hosting.ApplicationModel;
+using System.Security.Cryptography.Xml;
+
+namespace CommunityToolkit.Aspire.Hosting.Zitadel;
+
+/// <summary>
+/// A resource that represents a Zitadel resource.
+/// <param name="name">The name of the resource.</param>
+/// <param name="admin">A parameter that contains the Zitadel admin, or <see langword="null"/> to use a default value.</param>
+/// <param name="adminPassword">A parameter that contains the Zitadel admin password.</param>
+/// </summary>
+public sealed class ZitadelResource(string name, ParameterResource? admin, ParameterResource adminPassword)
+    : ContainerResource(name), IResourceWithServiceDiscovery
+{
+    private const string DefaultAdmin = "zitadel-admin";
+
+    /// <summary>
+    /// Gets the parameter that contains the Zitadel admin username.
+    /// </summary>
+    public ParameterResource? AdminUserNameParameter { get; } = admin;
+
+    /// <summary>
+    /// Gets the parameter that contains the Zitadel admin username.
+    /// </summary>
+    internal ReferenceExpression AdminReference
+        => AdminUserNameParameter is not null
+            ? ReferenceExpression.Create($"{AdminUserNameParameter}")
+            : ReferenceExpression.Create($"{DefaultAdmin}");
+
+    /// <summary>
+    /// Gets the parameter that contains the Zitadel admin password.
+    /// </summary>
+    public ParameterResource AdminPasswordParameter { get; } = adminPassword ?? throw new ArgumentNullException(nameof(adminPassword));
+}

src/CommunityToolkit.Aspire.Hosting.Zitadel/ZitadelResourceBuilderExtensions.cs

@@ -0,0 +1,67 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Aspire.Hosting;
+using Aspire.Hosting.ApplicationModel;
+
+namespace CommunityToolkit.Aspire.Hosting.Zitadel;
+
+/// <summary>
+/// Provides extension methods for adding Zitadel resources to an <see cref="IDistributedApplicationBuilder"/>.
+/// </summary>
+public static class ZitadelResourceBuilderExtensions
+{
+    private const string AdminEnvVarName = "ZITADEL_DEFAULTINSTANCE_ORG_HUMAN_USERNAME";
+    private const string AdminEnvVarPassword = "ZITADEL_DEFAULTINSTANCE_ORG_HUMAN_PASSWORD";
+
+    private const int DefaultcontainerPort = 8080; // ZITADEL_PORT
+    private const string ManagementEndpointName = "management";
+
+    /// <summary>
+    /// Adds a Zitadel container to the application model.
+    /// </summary>
+    /// <param name="builder">The <see cref="IDistributedApplicationBuilder"/>.</param>
+    /// <param name="name">The name of the resource. </param>
+    /// <param name="port">The host port that the underlying container is bound to when running locally.</param>
+    /// <param name="adminUsername">The parameter used as the admin for the Zitadel resource. If <see langword="null"/> a default value will be used.</param>
+    /// <param name="adminPassword">The parameter used as the admin password for the Zitadel resource. If <see langword="null"/> a default password will be used.</param>
+    /// <returns>A reference to the <see cref="IResourceBuilder{T}"/>.</returns>
+    public static IResourceBuilder<ZitadelResource> AddZitadel
+    (
+        this IDistributedApplicationBuilder builder,
+        string name,
+        int? port = null,
+        IResourceBuilder<ParameterResource>? adminUsername = null,
+        IResourceBuilder<ParameterResource>? adminPassword = null
+    )
+    {
+        ArgumentNullException.ThrowIfNull(builder);
+        ArgumentException.ThrowIfNullOrEmpty(name);
+
+        var passwordParameter = adminPassword?.Resource ??
+                                builder.AddParameter
+                                (
+                                    name: $"{name}-password",
+                                    valueGetter: () => "Password1!",
+                                    secret: true
+                                ).Resource;
+
+        var resource = new ZitadelResource(name, adminUsername?.Resource, passwordParameter);
+
+        // TODO: Add health check
+        var zitadel = builder
+            .AddResource(resource)
+            .WithImage(ZitadelContainerImageTags.Image)
+            .WithImageRegistry(ZitadelContainerImageTags.Registry)
+            .WithImageTag(ZitadelContainerImageTags.Tag)
+            .WithHttpEndpoint(port: port, targetPort: DefaultcontainerPort)
+            .WithEnvironment(context =>
+            {
+                context.EnvironmentVariables[AdminEnvVarName] = resource.AdminReference;
+                context.EnvironmentVariables[AdminEnvVarPassword] = resource.AdminPasswordParameter;
+                // TODO: Implement Postgres/Cockroach DB integration. See https://zitadel.com/docs/self-hosting/deploy/compose
+            });
+
+        return zitadel;
+    }
+}