Spaces:

Yuruyuruu
/

LibraryManagement

Sleeping

App Files Files Community

Yuyuqt commited on Apr 24

Commit

0acba57

1 Parent(s): cf599e0

add: authorization

Browse files

Files changed (23) hide show

BlazorFrontend/BlazorFrontend.csproj +4 -0
BlazorFrontend/Components/App.razor +2 -2
BlazorFrontend/Components/Layout/Component.razor +19 -0
BlazorFrontend/Components/Layout/MainLayout.razor +110 -35
BlazorFrontend/Components/Pages/Books.razor +79 -3
BlazorFrontend/Components/Pages/Home.razor +58 -7
BlazorFrontend/Components/Pages/Login.razor +114 -0
BlazorFrontend/Components/Pages/Logout.razor +20 -0
BlazorFrontend/Components/Pages/Register.razor +112 -0
BlazorFrontend/Components/Routes.razor +14 -6
BlazorFrontend/Components/_Imports.razor +2 -1
BlazorFrontend/Models/Dtos/LibraryDtos.cs +284 -0
BlazorFrontend/Models/Dtos/LoyaltyRedemptionDto.cs +32 -0
BlazorFrontend/Models/ErrorViewModel.cs +9 -0
BlazorFrontend/Models/MemberDetailsViewModel.cs +12 -0
BlazorFrontend/Models/MembershipViewModel.cs +14 -0
BlazorFrontend/Models/PagedResult.cs +14 -0
BlazorFrontend/Models/RewardsViewModel.cs +21 -0
BlazorFrontend/Models/SubscriptionsViewModel.cs +10 -0
BlazorFrontend/Program.cs +23 -0
BlazorFrontend/Providers/JwtAuthenticationStateProvider.cs +71 -0
BlazorFrontend/Services/AuthHeaderHandler.cs +42 -0
BlazorFrontend/Services/LibraryApiClient.cs +375 -0

BlazorFrontend/BlazorFrontend.csproj CHANGED Viewed

@@ -6,4 +6,8 @@
     <ImplicitUsings>enable</ImplicitUsings>
   </PropertyGroup>
 </Project>

     <ImplicitUsings>enable</ImplicitUsings>
   </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.17.0" />
+  </ItemGroup>
 </Project>

BlazorFrontend/Components/App.razor CHANGED Viewed

@@ -55,11 +55,11 @@
     </style>
     <link rel="icon" type="image/png" href="favicon.png" />
-    <HeadOutlet />
 </head>
 <body class="h-full">
-    <Routes />
     <script src="_framework/blazor.web.js"></script>
     <!-- Toast Notification Container -->

     </style>
     <link rel="icon" type="image/png" href="favicon.png" />
+    <HeadOutlet @rendermode="new InteractiveServerRenderMode(prerender: false)" />
 </head>
 <body class="h-full">
+    <Routes @rendermode="new InteractiveServerRenderMode(prerender: false)" />
     <script src="_framework/blazor.web.js"></script>
     <!-- Toast Notification Container -->

BlazorFrontend/Components/Layout/Component.razor ADDED Viewed

	@@ -0,0 +1,19 @@

+<AuthorizeView>
+    <Authorized Context="authContext">
+        @if (!authContext.User.IsInRole("Librarian"))
+        {
+            <NavLink href="Borrowings" class="nav-link" ActiveClass="active">
+                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="m21 21-6-6m6 6v-4.8m0 4.8h-4.8"/><path d="M3 16.2V21m0 0h4.8M3 21l6-6"/><path d="M21 7.8V3m0 0h-4.8M21 3l-6 6"/><path d="M3 7.8V3m0 0h4.8M3 3l6 6"/></svg>
+                Active Loans
+            </NavLink>
+            <NavLink href="Membership" class="nav-link" ActiveClass="active">
+                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><rect width="20" height="14" x="2" y="5" rx="2"/><line x1="2" x2="22" y1="10" y2="10"/></svg>
+                My Membership
+            </NavLink>
+            <NavLink href="Rewards" class="nav-link" ActiveClass="active">
+                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M20 7h-9"/><path d="M14 17H5"/><circle cx="17" cy="17" r="3"/><circle cx="7" cy="7" r="3"/></svg>
+                Rewards
+            </NavLink>
+        }
+    </Authorized>
+</AuthorizeView>

BlazorFrontend/Components/Layout/MainLayout.razor CHANGED Viewed

@@ -1,4 +1,7 @@
 @inherits LayoutComponentBase
 <div class="flex h-full overflow-hidden">
     <!-- Sidebar -->
@@ -20,42 +23,79 @@
                         <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M4 19.5v-15A2.5 2.5 0 0 1 6.5 2H20v20H6.5a2.5 2.5 0 0 1 0-5H20"/></svg>
                         Books Catalog
                     </NavLink>
-                    <NavLink href="Borrowings" class="nav-link" ActiveClass="active">
-                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="m21 21-6-6m6 6v-4.8m0 4.8h-4.8"/><path d="M3 16.2V21m0 0h4.8M3 21l6-6"/><path d="M21 7.8V3m0 0h-4.8M21 3l-6 6"/><path d="M3 7.8V3m0 0h4.8M3 3l6 6"/></svg>
-                        Active Loans
-                    </NavLink>
-                    <NavLink href="Membership" class="nav-link" ActiveClass="active">
-                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><rect width="20" height="14" x="2" y="5" rx="2"/><line x1="2" x2="22" y1="10" y2="10"/></svg>
-                        My Membership
-                    </NavLink>
-                    <NavLink href="Rewards" class="nav-link" ActiveClass="active">
-                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M20 7h-9"/><path d="M14 17H5"/><circle cx="17" cy="17" r="3"/><circle cx="7" cy="7" r="3"/></svg>
-                        Rewards
-                    </NavLink>
-                    <NavLink href="Members" class="nav-link" ActiveClass="active">
-                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/></svg>
-                        Members
-                    </NavLink>
-                    <NavLink href="Borrowings/Manage" class="nav-link" ActiveClass="active">
-                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M11 15h2a2 2 0 1 0 0-4h-2a2 2 0 1 1 0-4h2"/><path d="M12 5v14"/><path d="M18 19V5l-4 4"/><circle cx="12" cy="12" r="10"/></svg>
-                        Manage Borrowings
-                    </NavLink>
-                    <NavLink href="Rewards/Manage" class="nav-link" ActiveClass="active">
-                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/></svg>
-                        Manage Rewards
-                    </NavLink>
                 </nav>
             </div>
             <div class="px-4 py-4 border-t border-slate-100">
-                <div class="flex items-center gap-3">
-                    <div class="h-8 w-8 rounded-full bg-slate-900 flex items-center justify-center text-white font-bold text-xs uppercase">
-                        GU
-                    </div>
-                    <div class="flex flex-col">
-                        <span class="text-sm font-medium">Guest User</span>
-                        <span class="text-xs text-slate-500">Sign in to borrow</span>
-                    </div>
-                </div>
             </div>
         </div>
     </aside>
@@ -85,7 +125,14 @@
                             <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 17h5l-1.405-1.405A2.032 2.032 0 0118 14.158V11a6.002 6.002 0 00-4-5.659V5a2 2 0 10-4 0v.341C7.67 6.165 6 8.388 6 11v3.159c0 .538-.214 1.055-.595 1.436L4 17h5m6 0v1a3 3 0 11-6 0v-1m6 0H9" />
                         </svg>
                     </button>
-                    <a href="/login" class="btn-primary py-1.5">Sign In</a>
                 </div>
             </div>
         </header>
@@ -93,7 +140,16 @@
         <!-- Main Content -->
         <main class="flex-1 relative overflow-y-auto focus:outline-none">
             <div class="py-8 px-4 sm:px-6 md:px-8 max-w-7xl mx-auto">
-                @Body
             </div>
         </main>
     </div>
@@ -104,3 +160,22 @@
     <a href="" class="reload text-blue-500 hover:underline">Reload</a>
     <a class="dismiss cursor-pointer">🗙</a>
 </div>

 @inherits LayoutComponentBase
+@using BlazorFrontend.Providers
+@using Microsoft.AspNetCore.Components.Authorization
+@inject AuthenticationStateProvider AuthStateProvider
 <div class="flex h-full overflow-hidden">
     <!-- Sidebar -->
                         <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M4 19.5v-15A2.5 2.5 0 0 1 6.5 2H20v20H6.5a2.5 2.5 0 0 1 0-5H20"/></svg>
                         Books Catalog
                     </NavLink>
+                    <AuthorizeView>
+                        <NotAuthorized>
+                            <NavLink href="Borrowings" class="nav-link" ActiveClass="active">
+                                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="m21 21-6-6m6 6v-4.8m0 4.8h-4.8"/><path d="M3 16.2V21m0 0h4.8M3 21l6-6"/><path d="M21 7.8V3m0 0h-4.8M21 3l-6 6"/><path d="M3 7.8V3m0 0h4.8M3 3l6 6"/></svg>
+                                Active Loans
+                            </NavLink>
+                        </NotAuthorized>
+                    </AuthorizeView>
+                    <AuthorizeView>
+                        <Authorized Context="authContext">
+                            @if (!authContext.User.IsInRole("Librarian"))
+                            {
+                                <NavLink href="Borrowings" class="nav-link" ActiveClass="active">
+                                    <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="m21 21-6-6m6 6v-4.8m0 4.8h-4.8"/><path d="M3 16.2V21m0 0h4.8M3 21l6-6"/><path d="M21 7.8V3m0 0h-4.8M21 3l-6 6"/><path d="M3 7.8V3m0 0h4.8M3 3l6 6"/></svg>
+                                    Active Loans
+                                </NavLink>
+                                <NavLink href="Membership" class="nav-link" ActiveClass="active">
+                                    <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><rect width="20" height="14" x="2" y="5" rx="2"/><line x1="2" x2="22" y1="10" y2="10"/></svg>
+                                    My Membership
+                                </NavLink>
+                                <NavLink href="Rewards" class="nav-link" ActiveClass="active">
+                                    <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M20 7h-9"/><path d="M14 17H5"/><circle cx="17" cy="17" r="3"/><circle cx="7" cy="7" r="3"/></svg>
+                                    Rewards
+                                </NavLink>
+                            }
+                        </Authorized>
+                    </AuthorizeView>
+                    <AuthorizeView Roles="Librarian">
+                        <Authorized>
+                            <NavLink href="Members" class="nav-link" ActiveClass="active">
+                                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/></svg>
+                                Members
+                            </NavLink>
+                            <NavLink href="Borrowings/Manage" class="nav-link" ActiveClass="active">
+                                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M11 15h2a2 2 0 1 0 0-4h-2a2 2 0 1 1 0-4h2"/><path d="M12 5v14"/><path d="M18 19V5l-4 4"/><circle cx="12" cy="12" r="10"/></svg>
+                                Manage Borrowings
+                            </NavLink>
+                            <NavLink href="Rewards/Manage" class="nav-link" ActiveClass="active">
+                                <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="flex-shrink-0 mr-3"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/></svg>
+                                Manage Rewards
+                            </NavLink>
+                        </Authorized>
+                    </AuthorizeView>
                 </nav>
             </div>
             <div class="px-4 py-4 border-t border-slate-100">
+                <AuthorizeView>
+                    <Authorized Context="authContext">
+                        <div class="flex items-center gap-3">
+                            <div class="h-8 w-8 rounded-full bg-slate-900 flex items-center justify-center text-white font-bold text-xs uppercase">
+                                @(authContext.User.Identity?.Name?.Substring(0, 2) ?? "US")
+                            </div>
+                            <div class="flex flex-col">
+                                <span class="text-sm font-medium">@authContext.User.Identity?.Name</span>
+                                <span class="text-xs text-slate-500">@authContext.User.Claims.FirstOrDefault(c => c.Type == System.Security.Claims.ClaimTypes.Role)?.Value</span>
+                            </div>
+                        </div>
+                    </Authorized>
+                    <NotAuthorized>
+                        <div class="flex items-center gap-3">
+                            <div class="h-8 w-8 rounded-full bg-slate-900 flex items-center justify-center text-white font-bold text-xs uppercase">
+                                GU
+                            </div>
+                            <div class="flex flex-col">
+                                <span class="text-sm font-medium">Guest User</span>
+                                <span class="text-xs text-slate-500">Sign in to borrow</span>
+                            </div>
+                        </div>
+                    </NotAuthorized>
+                </AuthorizeView>
             </div>
         </div>
     </aside>
                             <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 17h5l-1.405-1.405A2.032 2.032 0 0118 14.158V11a6.002 6.002 0 00-4-5.659V5a2 2 0 10-4 0v.341C7.67 6.165 6 8.388 6 11v3.159c0 .538-.214 1.055-.595 1.436L4 17h5m6 0v1a3 3 0 11-6 0v-1m6 0H9" />
                         </svg>
                     </button>
+                    <AuthorizeView>
+                        <Authorized>
+                            <a href="/logout" class="btn-secondary py-1.5">Logout</a>
+                        </Authorized>
+                        <NotAuthorized>
+                            <a href="/login" class="btn-primary py-1.5">Sign In</a>
+                        </NotAuthorized>
+                    </AuthorizeView>
                 </div>
             </div>
         </header>
         <!-- Main Content -->
         <main class="flex-1 relative overflow-y-auto focus:outline-none">
             <div class="py-8 px-4 sm:px-6 md:px-8 max-w-7xl mx-auto">
+                @if (_isReady)
+                {
+                    @Body
+                }
+                else
+                {
+                    <div class="flex items-center justify-center h-64">
+                        <div class="animate-spin rounded-full h-12 w-12 border-b-2 border-slate-900"></div>
+                    </div>
+                }
             </div>
         </main>
     </div>
     <a href="" class="reload text-blue-500 hover:underline">Reload</a>
     <a class="dismiss cursor-pointer">🗙</a>
 </div>
+@code {
+    private bool _isReady;
+    protected override async Task OnAfterRenderAsync(bool firstRender)
+    {
+        if (firstRender)
+        {
+            var jwtProvider = AuthStateProvider as JwtAuthenticationStateProvider;
+            if (jwtProvider != null)
+            {
+                await jwtProvider.LoadTokenAsync();
+            }
+            _isReady = true;
+            StateHasChanged();
+        }
+    }
+}

BlazorFrontend/Components/Pages/Books.razor CHANGED Viewed

@@ -1,4 +1,8 @@
 @page "/Books"
 <PageTitle>Books Catalog</PageTitle>
@@ -7,6 +11,78 @@
     <p class="text-sm text-slate-500 mt-1">Browse and search our collection of books.</p>
 </div>
-<div class="card p-6">
-    <p class="text-slate-600">Books list will be displayed here.</p>
-</div>

 @page "/Books"
+@using BlazorFrontend.Services
+@using BlazorFrontend.Models.Dtos
+@inject HttpClient Http
 <PageTitle>Books Catalog</PageTitle>
     <p class="text-sm text-slate-500 mt-1">Browse and search our collection of books.</p>
 </div>
+@if (_books == null)
+{
+    <div class="card p-6 text-center">
+        <p class="text-slate-600">Loading books...</p>
+    </div>
+}
+else if (!_books.Any())
+{
+    <div class="card p-6 text-center">
+        <p class="text-slate-600">No books found in the catalog.</p>
+    </div>
+}
+else
+{
+    <div class="grid grid-cols-1 md:grid-cols-3 lg:grid-cols-4 gap-6">
+        @foreach (var book in _books)
+        {
+            <div class="card flex flex-col h-full hover:shadow-md transition-shadow">
+                <div class="p-5 flex-grow">
+                    <h3 class="font-semibold text-lg text-slate-900 line-clamp-2">@book.Title</h3>
+                    <p class="text-sm text-slate-500 mt-1">By @book.Author</p>
+                    <div class="mt-4 flex flex-wrap gap-2">
+                        @if (book.Categories != null && book.Categories.Any())
+                        {
+                            <span class="inline-flex items-center px-2.5 py-0.5 rounded-full text-xs font-medium bg-slate-100 text-slate-800">
+                                @string.Join(", ", book.Categories.Select(c => c.Name))
+                            </span>
+                        }
+                        @if (book.AvailableCopies > 0)
+                        {
+                            <span class="inline-flex items-center px-2.5 py-0.5 rounded-full text-xs font-medium bg-green-100 text-green-800">
+                                Available (@book.AvailableCopies)
+                            </span>
+                        }
+                        else
+                        {
+                            <span class="inline-flex items-center px-2.5 py-0.5 rounded-full text-xs font-medium bg-red-100 text-red-800">
+                                Checked Out
+                            </span>
+                        }
+                    </div>
+                </div>
+                <div class="px-5 py-4 border-t border-slate-100 mt-auto">
+                    <AuthorizeView>
+                        <Authorized>
+                            <button class="w-full btn-primary py-2" disabled="@(book.AvailableCopies <= 0)">
+                                Borrow Book
+                            </button>
+                        </Authorized>
+                        <NotAuthorized>
+                            <a href="/login" class="w-full btn-secondary py-2 block text-center">Sign In to Borrow</a>
+                        </NotAuthorized>
+                    </AuthorizeView>
+                </div>
+            </div>
+        }
+    </div>
+}
+@code {
+    private IEnumerable<BookDto>? _books;
+    protected override async Task OnInitializedAsync()
+    {
+        try
+        {
+            _books = await Http.GetFromJsonAsync<IEnumerable<BookDto>>("api/books");
+        }
+        catch (Exception ex)
+        {
+            Console.WriteLine("Error fetching books: " + ex.Message);
+            _books = new List<BookDto>();
+        }
+    }
+}

BlazorFrontend/Components/Pages/Home.razor CHANGED Viewed

@@ -1,4 +1,7 @@
 @page "/"
 <PageTitle>Dashboard</PageTitle>
@@ -10,14 +13,62 @@
 <div class="grid grid-cols-1 md:grid-cols-3 gap-6 mb-8">
     <div class="card p-6">
         <h3 class="text-lg font-medium text-slate-900">Total Books</h3>
-        <p class="text-3xl font-bold text-slate-700 mt-2">--</p>
     </div>
     <div class="card p-6">
-        <h3 class="text-lg font-medium text-slate-900">Active Loans</h3>
-        <p class="text-3xl font-bold text-slate-700 mt-2">--</p>
-    </div>
-    <div class="card p-6">
-        <h3 class="text-lg font-medium text-slate-900">Members</h3>
-        <p class="text-3xl font-bold text-slate-700 mt-2">--</p>
     </div>
 </div>

 @page "/"
+@using BlazorFrontend.Services
+@using BlazorFrontend.Models.Dtos
+@inject HttpClient Http
 <PageTitle>Dashboard</PageTitle>
 <div class="grid grid-cols-1 md:grid-cols-3 gap-6 mb-8">
     <div class="card p-6">
         <h3 class="text-lg font-medium text-slate-900">Total Books</h3>
+        <p class="text-3xl font-bold text-slate-700 mt-2">@_totalBooks</p>
     </div>
     <div class="card p-6">
+        <h3 class="text-lg font-medium text-slate-900">Categories</h3>
+        <p class="text-3xl font-bold text-slate-700 mt-2">@_totalCategories</p>
     </div>
+    <AuthorizeView Roles="Librarian">
+        <Authorized>
+            <div class="card p-6">
+                <h3 class="text-lg font-medium text-slate-900">Total Users</h3>
+                <p class="text-3xl font-bold text-slate-700 mt-2">@_totalUsers</p>
+            </div>
+        </Authorized>
+        <NotAuthorized>
+            <div class="card p-6">
+                <h3 class="text-lg font-medium text-slate-900">My Active Loans</h3>
+                <p class="text-3xl font-bold text-slate-700 mt-2">@_myLoans</p>
+            </div>
+        </NotAuthorized>
+    </AuthorizeView>
 </div>
+@code {
+    private string _totalBooks = "--";
+    private string _totalCategories = "--";
+    private string _totalUsers = "--";
+    private string _myLoans = "--";
+    protected override async Task OnInitializedAsync()
+    {
+        try
+        {
+            var books = await Http.GetFromJsonAsync<IEnumerable<BookDto>>("api/books");
+            _totalBooks = books?.Count().ToString() ?? "0";
+            var categories = await Http.GetFromJsonAsync<IEnumerable<CategoryDto>>("api/categories");
+            _totalCategories = categories?.Count().ToString() ?? "0";
+            // These endpoints might require auth, we catch exceptions if the user is unauthenticated or unauthorized
+            try
+            {
+                var users = await Http.GetFromJsonAsync<IEnumerable<UserDto>>("api/users");
+                _totalUsers = users?.Count().ToString() ?? "0";
+            }
+            catch { }
+            try
+            {
+                var loans = await Http.GetFromJsonAsync<IEnumerable<BorrowingDto>>("api/borrowings/me");
+                _myLoans = loans?.Count().ToString() ?? "0";
+            }
+            catch { }
+        }
+        catch (Exception ex)
+        {
+            Console.WriteLine("Error fetching dashboard data: " + ex.Message);
+        }
+    }
+}

BlazorFrontend/Components/Pages/Login.razor ADDED Viewed

	@@ -0,0 +1,114 @@

+@page "/login"
+@using BlazorFrontend.Services
+@using BlazorFrontend.Providers
+@using BlazorFrontend.Models.Dtos
+@using Microsoft.AspNetCore.Components.Authorization
+@inject HttpClient Http
+@inject AuthenticationStateProvider AuthStateProvider
+@inject NavigationManager Navigation
+<PageTitle>Sign In</PageTitle>
+<div class="min-h-[calc(100vh-200px)] flex items-center justify-center py-12 px-4 sm:px-6 lg:px-8">
+    <div class="max-w-md w-full space-y-8 bg-white p-10 rounded-2xl border border-slate-200 shadow-xl">
+        <div>
+            <div class="mx-auto h-12 w-12 bg-slate-900 rounded-xl flex items-center justify-center text-white mb-4">
+                <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 3h4a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-4"/><polyline points="10 17 15 12 10 7"/><line x1="15" y1="12" x2="3" y2="12"/></svg>
+            </div>
+            <h2 class="text-center text-3xl font-extrabold text-slate-900 tracking-tight">Welcome back</h2>
+            <p class="mt-2 text-center text-sm text-slate-500">
+                Continue where you left off.
+            </p>
+        </div>
+        @if (!string.IsNullOrEmpty(_errorMessage))
+        {
+            <div class="bg-red-50 text-red-600 p-3 rounded-lg border border-red-200 text-sm mb-4">
+                @_errorMessage
+            </div>
+        }
+        <EditForm Model="@_loginRequest" OnValidSubmit="HandleLogin" FormName="loginForm" class="mt-8 space-y-6">
+            <DataAnnotationsValidator />
+            <div class="space-y-4">
+                <div>
+                    <label class="block text-sm font-medium text-slate-700 mb-1">Email Address</label>
+                    <InputText @bind-Value="_loginRequest.Email" type="email" required class="appearance-none relative block w-full px-3 py-2 border border-slate-300 placeholder-slate-400 text-slate-900 rounded-md focus:outline-none focus:ring-slate-900 focus:border-slate-900 focus:z-10 sm:text-sm" placeholder="name@example.com" />
+                    <ValidationMessage For="@(() => _loginRequest.Email)" class="text-xs text-red-500 mt-1" />
+                </div>
+                <div>
+                    <div class="flex items-center justify-between mb-1">
+                        <label class="block text-sm font-medium text-slate-700">Password</label>
+                    </div>
+                    <InputText type="password" @bind-Value="_loginRequest.Password" required class="appearance-none relative block w-full px-3 py-2 border border-slate-300 placeholder-slate-400 text-slate-900 rounded-md focus:outline-none focus:ring-slate-900 focus:border-slate-900 focus:z-10 sm:text-sm" placeholder="••••••••" />
+                    <ValidationMessage For="@(() => _loginRequest.Password)" class="text-xs text-red-500 mt-1" />
+                </div>
+            </div>
+            <div>
+                <button type="submit" disabled="@_isLoading" class="group relative w-full flex justify-center py-2.5 px-4 border border-transparent text-sm font-medium rounded-md text-white bg-slate-900 hover:bg-slate-800 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-slate-900 transition-all disabled:opacity-50">
+                    @if (_isLoading)
+                    {
+                        <span>Signing in...</span>
+                    }
+                    else
+                    {
+                        <span>Sign In</span>
+                    }
+                </button>
+            </div>
+            <div class="text-center">
+                <span class="text-sm text-slate-500">Don't have an account?</span>
+                <a href="/register" class="text-sm font-medium text-slate-900 hover:underline ml-1">Create one for free</a>
+            </div>
+        </EditForm>
+    </div>
+</div>
+@code {
+    [SupplyParameterFromForm]
+    private LoginRequest _loginRequest { get; set; } = new();
+    private string? _errorMessage;
+    private bool _isLoading;
+    private async Task HandleLogin()
+    {
+        try
+        {
+            _isLoading = true;
+            _errorMessage = null;
+            var res = await Http.PostAsJsonAsync("api/auth/login", _loginRequest);
+            if (res.IsSuccessStatusCode)
+            {
+                var response = await res.Content.ReadFromJsonAsync<AuthResponse>();
+                if (response != null && !string.IsNullOrEmpty(response.Token))
+                {
+                    var jwtProvider = (JwtAuthenticationStateProvider)AuthStateProvider;
+                    await jwtProvider.LoginAsync(response.Token);
+                    // ensure storage is ready
+                    await Task.Delay(100);
+                    Navigation.NavigateTo("/");
+                    return;
+                }
+            }
+            _errorMessage = "Invalid credentials or server error.";
+        }
+        catch (Exception ex)
+        {
+            _errorMessage = "An error occurred: " + ex.Message;
+        }
+        finally
+        {
+            _isLoading = false;
+        }
+    }
+}

BlazorFrontend/Components/Pages/Logout.razor ADDED Viewed

	@@ -0,0 +1,20 @@

+@page "/logout"
+@using BlazorFrontend.Providers
+@using Microsoft.AspNetCore.Components.Authorization
+@inject AuthenticationStateProvider AuthStateProvider
+@inject NavigationManager Navigation
+<PageTitle>Logging out...</PageTitle>
+<div class="text-center mt-10">
+    <p class="text-slate-600">Signing you out...</p>
+</div>
+@code {
+    protected override async Task OnInitializedAsync()
+    {
+        var jwtProvider = (JwtAuthenticationStateProvider)AuthStateProvider;
+        await jwtProvider.LogoutAsync();
+        Navigation.NavigateTo("/login");
+    }
+}

BlazorFrontend/Components/Pages/Register.razor ADDED Viewed

	@@ -0,0 +1,112 @@

+@page "/register"
+@using BlazorFrontend.Services
+@using BlazorFrontend.Providers
+@using BlazorFrontend.Models.Dtos
+@using Microsoft.AspNetCore.Components.Authorization
+@inject HttpClient Http
+@inject NavigationManager Navigation
+<PageTitle>Register</PageTitle>
+<div class="min-h-[calc(100vh-200px)] flex items-center justify-center py-12 px-4 sm:px-6 lg:px-8">
+    <div class="max-w-md w-full space-y-8 bg-white p-10 rounded-2xl border border-slate-200 shadow-xl">
+        <div>
+            <div class="mx-auto h-12 w-12 bg-slate-900 rounded-xl flex items-center justify-center text-white mb-4">
+                <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><line x1="19" y1="8" x2="19" y2="14"/><line x1="22" y1="11" x2="16" y2="11"/></svg>
+            </div>
+            <h2 class="text-center text-3xl font-extrabold text-slate-900 tracking-tight">Join our Library</h2>
+            <p class="mt-2 text-center text-sm text-slate-500">
+                Start your reading journey today.
+            </p>
+        </div>
+        @if (!string.IsNullOrEmpty(_errorMessage))
+        {
+            <div class="bg-red-50 text-red-600 p-3 rounded-lg border border-red-200 text-sm mb-4">
+                @_errorMessage
+            </div>
+        }
+        <EditForm Model="@_registerRequest" OnValidSubmit="HandleRegister" FormName="registerForm" class="mt-8 space-y-6">
+            <DataAnnotationsValidator />
+            <div class="space-y-4">
+                <div>
+                    <label class="block text-sm font-medium text-slate-700 mb-1">Full Name</label>
+                    <InputText @bind-Value="_registerRequest.FullName" required class="appearance-none relative block w-full px-3 py-2 border border-slate-300 placeholder-slate-400 text-slate-900 rounded-md focus:outline-none focus:ring-slate-900 focus:border-slate-900 focus:z-10 sm:text-sm" placeholder="John Doe" />
+                    <ValidationMessage For="@(() => _registerRequest.FullName)" class="text-xs text-red-500 mt-1" />
+                </div>
+                <div>
+                    <label class="block text-sm font-medium text-slate-700 mb-1">Email Address</label>
+                    <InputText type="email" @bind-Value="_registerRequest.Email" required class="appearance-none relative block w-full px-3 py-2 border border-slate-300 placeholder-slate-400 text-slate-900 rounded-md focus:outline-none focus:ring-slate-900 focus:border-slate-900 focus:z-10 sm:text-sm" placeholder="name@example.com" />
+                    <ValidationMessage For="@(() => _registerRequest.Email)" class="text-xs text-red-500 mt-1" />
+                </div>
+                <div>
+                    <label class="block text-sm font-medium text-slate-700 mb-1">Phone Number</label>
+                    <InputText type="tel" @bind-Value="_registerRequest.PhoneNumber" class="appearance-none relative block w-full px-3 py-2 border border-slate-300 placeholder-slate-400 text-slate-900 rounded-md focus:outline-none focus:ring-slate-900 focus:border-slate-900 focus:z-10 sm:text-sm" placeholder="09123456789" />
+                    <ValidationMessage For="@(() => _registerRequest.PhoneNumber)" class="text-xs text-red-500 mt-1" />
+                </div>
+                <div>
+                    <label class="block text-sm font-medium text-slate-700 mb-1">Password</label>
+                    <InputText type="password" @bind-Value="_registerRequest.Password" required class="appearance-none relative block w-full px-3 py-2 border border-slate-300 placeholder-slate-400 text-slate-900 rounded-md focus:outline-none focus:ring-slate-900 focus:border-slate-900 focus:z-10 sm:text-sm" placeholder="••••••••" />
+                    <ValidationMessage For="@(() => _registerRequest.Password)" class="text-xs text-red-500 mt-1" />
+                </div>
+            </div>
+            <div>
+                <button type="submit" disabled="@_isLoading" class="group relative w-full flex justify-center py-2.5 px-4 border border-transparent text-sm font-medium rounded-md text-white bg-slate-900 hover:bg-slate-800 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-slate-900 transition-all disabled:opacity-50">
+                    @if (_isLoading)
+                    {
+                        <span>Creating account...</span>
+                    }
+                    else
+                    {
+                        <span>Create Account</span>
+                    }
+                </button>
+            </div>
+            <div class="text-center">
+                <span class="text-sm text-slate-500">Already have an account?</span>
+                <a href="/login" class="text-sm font-medium text-slate-900 hover:underline ml-1">Sign in</a>
+            </div>
+        </EditForm>
+    </div>
+</div>
+@code {
+    [SupplyParameterFromForm]
+    private RegisterRequest _registerRequest { get; set; } = new();
+    private string? _errorMessage;
+    private bool _isLoading;
+    private async Task HandleRegister()
+    {
+        try
+        {
+            _isLoading = true;
+            _errorMessage = null;
+            var res = await Http.PostAsJsonAsync("api/auth/register", _registerRequest);
+            if (res.IsSuccessStatusCode)
+            {
+                Navigation.NavigateTo("/login");
+            }
+            else
+            {
+                _errorMessage = "Registration failed. This email might already be in use.";
+            }
+        }
+        catch (Exception ex)
+        {
+            _errorMessage = "An error occurred: " + ex.Message;
+        }
+        finally
+        {
+            _isLoading = false;
+        }
+    }
+}

BlazorFrontend/Components/Routes.razor CHANGED Viewed

@@ -1,6 +1,14 @@
-<Router AppAssembly="typeof(Program).Assembly">
-    <Found Context="routeData">
-        <RouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)" />
-        <FocusOnNavigate RouteData="routeData" Selector="h1" />
-    </Found>
-</Router>

+<CascadingAuthenticationState>
+    <Router AppAssembly="typeof(Program).Assembly">
+        <Found Context="routeData">
+            <AuthorizeRouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)" />
+            <FocusOnNavigate RouteData="routeData" Selector="h1" />
+        </Found>
+        <NotFound>
+            <PageTitle>Not found</PageTitle>
+            <LayoutView Layout="typeof(Layout.MainLayout)">
+                <p role="alert">Sorry, there's nothing at this address.</p>
+            </LayoutView>
+        </NotFound>
+    </Router>
+</CascadingAuthenticationState>

BlazorFrontend/Components/_Imports.razor CHANGED Viewed

@@ -1,4 +1,4 @@
-@using System.Net.Http
 @using System.Net.Http.Json
 @using Microsoft.AspNetCore.Components.Forms
 @using Microsoft.AspNetCore.Components.Routing
@@ -8,3 +8,4 @@
 @using Microsoft.JSInterop
 @using BlazorFrontend
 @using BlazorFrontend.Components

+@using System.Net.Http
 @using System.Net.Http.Json
 @using Microsoft.AspNetCore.Components.Forms
 @using Microsoft.AspNetCore.Components.Routing
 @using Microsoft.JSInterop
 @using BlazorFrontend
 @using BlazorFrontend.Components
+@using Microsoft.AspNetCore.Components.Authorization

BlazorFrontend/Models/Dtos/LibraryDtos.cs ADDED Viewed

	@@ -0,0 +1,284 @@

+using System.Text.Json.Serialization;
+namespace BlazorFrontend.Models.Dtos
+{
+    // Auth DTOs
+    public class RegisterRequest
+    {
+        public string FullName { get; set; } = string.Empty;
+        public string Email { get; set; } = string.Empty;
+        public string Password { get; set; } = string.Empty;
+        public string? PhoneNumber { get; set; }
+        public string? Address { get; set; }
+        public string? StudentId { get; set; }
+    }
+    public class LoginRequest
+    {
+        public string Email { get; set; } = string.Empty;
+        public string Password { get; set; } = string.Empty;
+    }
+    public class AuthResponse
+    {
+        public string Token { get; set; } = string.Empty;
+        public string FullName { get; set; } = string.Empty;
+        public string Role { get; set; } = string.Empty;
+        public DateTime Expiry { get; set; }
+    }
+    // Book DTOs
+    public class BookDto
+    {
+        public int Id { get; set; }
+        public string Title { get; set; } = string.Empty;
+        public string Isbn { get; set; } = string.Empty;
+        public string Author { get; set; } = string.Empty;
+        public string Status { get; set; } = string.Empty;
+        public bool IsActive { get; set; }
+        public string? Description { get; set; }
+        public int TotalCopies { get; set; }
+        public int AvailableCopies { get; set; }
+        public DateTime CreatedAt { get; set; }
+        public DateTime? UpdatedAt { get; set; }
+        public List<BookCategoryDto> Categories { get; set; } = new();
+    }
+    public class BookCategoryDto
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = string.Empty;
+    }
+    public class BookCreateRequest
+    {
+        public string Title { get; set; } = string.Empty;
+        public string Isbn { get; set; } = string.Empty;
+        public string Author { get; set; } = string.Empty;
+        public string? Description { get; set; }
+        public int TotalCopies { get; set; }
+        public List<int>? CategoryIds { get; set; }
+    }
+    public class BookUpdateRequest
+    {
+        public string Title { get; set; } = string.Empty;
+        public string Author { get; set; } = string.Empty;
+        public string? Description { get; set; }
+        public int TotalCopies { get; set; }
+        public List<int>? CategoryIds { get; set; }
+    }
+    // Borrowing DTOs
+    public class BorrowingDto
+    {
+        public Guid Id { get; set; }
+        public Guid UserId { get; set; }
+        public string UserEmail { get; set; } = string.Empty;
+        public int BookId { get; set; }
+        public string BookTitle { get; set; } = string.Empty;
+        public DateTime BorrowDate { get; set; }
+        public DateTime DueDate { get; set; }
+        public DateTime? ReturnDate { get; set; } // This is ActualReturnDate in some contexts
+        public string Status { get; set; } = string.Empty;
+        public decimal FineAmount { get; set; }
+        public bool IsFinePaid { get; set; }
+    }
+    public class BorrowRequest
+    {
+        public int BookId { get; set; }
+    }
+    // Category DTOs
+    public class CategoryDto
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = string.Empty;
+    }
+    public class CategoryCreateRequest
+    {
+        public string Name { get; set; } = string.Empty;
+    }
+    // Subscription & Membership DTOs
+    public class MembershipDto
+    {
+        public int Id { get; set; }
+        public string Type { get; set; } = string.Empty;
+        public int MaxBooks { get; set; }
+        public int BorrowingDays { get; set; }
+        public decimal Price { get; set; }
+        public int DurationMonths { get; set; }
+        public string? RewardId { get; set; }
+    }
+    public class SubscriptionDto
+    {
+        public Guid Id { get; set; }
+        public Guid UserId { get; set; }
+        public int MembershipId { get; set; }
+        public string MembershipType { get; set; } = string.Empty;
+        public string UserName { get; set; } = string.Empty;
+        public string UserEmail { get; set; } = string.Empty;
+        public DateTime StartDate { get; set; }
+        public DateTime ExpiryDate { get; set; }
+        public bool IsActive { get; set; }
+        public bool IsExpired => DateTime.UtcNow > ExpiryDate;
+    }
+    public class SubscribeRequest
+    {
+        public int MembershipId { get; set; }
+    }
+    public class AdminSubscribeRequest
+    {
+        public Guid UserId { get; set; }
+        public int MembershipId { get; set; }
+    }
+    // Loyalty DTOs
+    public class LoyaltyAccountDto
+    {
+        [JsonPropertyName("id")]
+        public string Id { get; set; } = string.Empty;
+        // Some responses use `accountId` instead of `id`.
+        [JsonPropertyName("accountId")]
+        public string? AccountId { get; set; }
+        [JsonPropertyName("externalUserId")]
+        public string ExternalUserId { get; set; } = string.Empty;
+        [JsonPropertyName("currentBalance")]
+        public double CurrentBalance { get; set; }
+        [JsonPropertyName("tier")]
+        public string Tier { get; set; } = string.Empty;
+        [JsonPropertyName("lifetimePoints")]
+        public double LifetimePoints { get; set; }
+    }
+    public class LoyaltyRewardDto
+    {
+        [JsonPropertyName("id")]
+        public string Id { get; set; } = string.Empty;
+        [JsonPropertyName("name")]
+        public string Name { get; set; } = string.Empty;
+        [JsonPropertyName("description")]
+        public string Description { get; set; } = string.Empty;
+        [JsonPropertyName("pointCost")]
+        public double PointCost { get; set; }
+        [JsonPropertyName("stockQuantity")]
+        public int StockQuantity { get; set; }
+        [JsonPropertyName("isActive")]
+        public bool IsActive { get; set; }
+    }
+    public class ClaimRewardRequestDto
+    {
+        public string RewardId { get; set; } = string.Empty;
+        public string? Notes { get; set; }
+    }
+    // User DTOs
+    public class UserDto
+    {
+        public Guid Id { get; set; }
+        public string FullName { get; set; } = string.Empty;
+        public string Email { get; set; } = string.Empty;
+        public string? PhoneNumber { get; set; }
+        public string Role { get; set; } = string.Empty;
+        public bool IsActive { get; set; }
+        public string? StudentId { get; set; }
+        public string? Address { get; set; }
+        public DateTime CreatedAt { get; set; }
+        public DateTime? UpdatedAt { get; set; }
+        public bool? BanStatus { get; set; }
+        public DateTime? SuspensionEndDate { get; set; }
+    }
+    public class UserCreateRequest
+    {
+        public string FullName { get; set; } = string.Empty;
+        public string Email { get; set; } = string.Empty;
+        public string Password { get; set; } = string.Empty;
+        public string? PhoneNumber { get; set; }
+        public string? StudentId { get; set; }
+        public string? Address { get; set; }
+    }
+    public class UserUpdateRequest
+    {
+        public string FullName { get; set; } = string.Empty;
+        public string? PhoneNumber { get; set; }
+        public string? StudentId { get; set; }
+        public string? Address { get; set; }
+    }
+    public class UserRoleUpdateRequest
+    {
+        public string Role { get; set; } = string.Empty;
+    }
+    // Points History DTOs
+    public class PointHistoryEntryDto
+    {
+        [JsonPropertyName("id")]
+        public int Id { get; set; }
+        [JsonPropertyName("accountId")]
+        public string AccountId { get; set; } = string.Empty;
+        [JsonPropertyName("externalUserId")]
+        public string? ExternalUserId { get; set; }
+        [JsonPropertyName("pointDelta")]
+        public double PointDelta { get; set; }
+        [JsonPropertyName("eventKey")]
+        public string EventKey { get; set; } = string.Empty;
+        [JsonPropertyName("description")]
+        public string Description { get; set; } = string.Empty;
+        [JsonPropertyName("referenceId")]
+        public string? ReferenceId { get; set; }
+        [JsonPropertyName("createdAt")]
+        public DateTime CreatedAt { get; set; }
+        [JsonPropertyName("rewardId")]
+        public string? RewardId { get; set; }
+        [JsonPropertyName("rewardName")]
+        public string? RewardName { get; set; }
+        [JsonPropertyName("redemptionStatus")]
+        public string? RedemptionStatus { get; set; }
+        [JsonPropertyName("redeemedAt")]
+        public DateTime? RedeemedAt { get; set; }
+    }
+    public class UserPointsHistoryDto
+    {
+        [JsonPropertyName("userId")]
+        public Guid UserId { get; set; }
+        [JsonPropertyName("userName")]
+        public string UserName { get; set; } = string.Empty;
+        [JsonPropertyName("userEmail")]
+        public string UserEmail { get; set; } = string.Empty;
+        [JsonPropertyName("accountId")]
+        public string AccountId { get; set; } = string.Empty;
+        [JsonPropertyName("currentBalance")]
+        public double CurrentBalance { get; set; }
+        [JsonPropertyName("tier")]
+        public string Tier { get; set; } = string.Empty;
+        [JsonPropertyName("history")]
+        public IEnumerable<PointHistoryEntryDto> History { get; set; } = Enumerable.Empty<PointHistoryEntryDto>();
+        [JsonPropertyName("redemptions")]
+        public IEnumerable<LoyaltyRedemptionDto> Redemptions { get; set; } = Enumerable.Empty<LoyaltyRedemptionDto>();
+    }
+}

BlazorFrontend/Models/Dtos/LoyaltyRedemptionDto.cs ADDED Viewed

	@@ -0,0 +1,32 @@

+using System;
+using System.Text.Json.Serialization;
+namespace BlazorFrontend.Models.Dtos
+{
+    public class LoyaltyRedemptionDto
+    {
+        [JsonPropertyName("id")]
+        public string Id { get; set; } = string.Empty;
+        [JsonPropertyName("systemId")]
+        public string SystemId { get; set; } = string.Empty;
+        [JsonPropertyName("externalUserId")]
+        public string ExternalUserId { get; set; } = string.Empty;
+        [JsonPropertyName("rewardId")]
+        public string? RewardId { get; set; }
+        [JsonPropertyName("rewardName")]
+        public string RewardName { get; set; } = string.Empty;
+        [JsonPropertyName("pointCost")]
+        public double PointCost { get; set; }
+        [JsonPropertyName("status")]
+        public string Status { get; set; } = string.Empty;
+        [JsonPropertyName("redeemedAt")]
+        public DateTime RedeemedAt { get; set; }
+    }
+}

BlazorFrontend/Models/ErrorViewModel.cs ADDED Viewed

	@@ -0,0 +1,9 @@

+namespace BlazorFrontend.Models
+{
+    public class ErrorViewModel
+    {
+        public string? RequestId { get; set; }
+        public bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
+    }
+}

BlazorFrontend/Models/MemberDetailsViewModel.cs ADDED Viewed

	@@ -0,0 +1,12 @@

+using BlazorFrontend.Models.Dtos;
+using System.Collections.Generic;
+namespace BlazorFrontend.Models
+{
+    public class MemberDetailsViewModel
+    {
+        public UserDto User { get; set; } = new();
+        public SubscriptionDto? CurrentSubscription { get; set; }
+        public List<MembershipDto> AvailableMemberships { get; set; } = new();
+    }
+}

BlazorFrontend/Models/MembershipViewModel.cs ADDED Viewed

	@@ -0,0 +1,14 @@

+using BlazorFrontend.Models.Dtos;
+using System.Collections.Generic;
+namespace BlazorFrontend.Models
+{
+    public class MembershipViewModel
+    {
+        public SubscriptionDto? CurrentSubscription { get; set; }
+        public List<MembershipDto> AvailableMemberships { get; set; } = new List<MembershipDto>();
+        public List<SubscriptionDto> QueuedMemberships { get; set; } = new List<SubscriptionDto>();
+        public LoyaltyAccountDto? LoyaltyAccount { get; set; }
+        public Dictionary<string, double> RewardPointCosts { get; set; } = new Dictionary<string, double>();
+    }
+}

BlazorFrontend/Models/PagedResult.cs ADDED Viewed

	@@ -0,0 +1,14 @@

+namespace BlazorFrontend.Models
+{
+    public class PagedResult<T>
+    {
+        public IEnumerable<T> Items { get; set; } = Enumerable.Empty<T>();
+        public int CurrentPage { get; set; }
+        public int TotalPages { get; set; }
+        public int TotalCount { get; set; }
+        public int PageSize { get; set; }
+        public bool HasPreviousPage => CurrentPage > 1;
+        public bool HasNextPage => CurrentPage < TotalPages;
+    }
+}

BlazorFrontend/Models/RewardsViewModel.cs ADDED Viewed

	@@ -0,0 +1,21 @@

+using BlazorFrontend.Models.Dtos;
+namespace BlazorFrontend.Models
+{
+    // Member rewards page view model
+    public class RewardsViewModel
+    {
+        public IEnumerable<LoyaltyRewardDto> Rewards { get; set; } = Enumerable.Empty<LoyaltyRewardDto>();
+        public LoyaltyAccountDto? Account { get; set; }
+        public IEnumerable<LoyaltyRedemptionDto> PendingRedemptions { get; set; } = Enumerable.Empty<LoyaltyRedemptionDto>();
+        public IEnumerable<LoyaltyRedemptionDto> RedemptionsHistory { get; set; } = Enumerable.Empty<LoyaltyRedemptionDto>();
+        public IEnumerable<PointHistoryEntryDto> PointsHistory { get; set; } = Enumerable.Empty<PointHistoryEntryDto>();
+    }
+    // Librarian rewards management view model
+    public class LibrarianRewardsViewModel
+    {
+        public IEnumerable<LoyaltyRedemptionDto> PendingRedemptions { get; set; } = Enumerable.Empty<LoyaltyRedemptionDto>();
+        public IEnumerable<UserPointsHistoryDto> AllMembersHistory { get; set; } = Enumerable.Empty<UserPointsHistoryDto>();
+    }
+}

BlazorFrontend/Models/SubscriptionsViewModel.cs ADDED Viewed

	@@ -0,0 +1,10 @@

+using BlazorFrontend.Models.Dtos;
+namespace BlazorFrontend.Models
+{
+    public class SubscriptionsViewModel
+    {
+        public List<MembershipDto> AvailableMemberships { get; set; } = new();
+        public List<SubscriptionDto> ActiveSubscriptions { get; set; } = new();
+    }
+}

BlazorFrontend/Program.cs CHANGED Viewed

@@ -1,4 +1,7 @@
 using BlazorFrontend.Components;
 var builder = WebApplication.CreateBuilder(args);
@@ -6,6 +9,26 @@ var builder = WebApplication.CreateBuilder(args);
 builder.Services.AddRazorComponents()
     .AddInteractiveServerComponents();
 var app = builder.Build();
 // Configure the HTTP request pipeline.

 using BlazorFrontend.Components;
+using Microsoft.AspNetCore.Components.Authorization;
+using BlazorFrontend.Providers;
+using BlazorFrontend.Services;
 var builder = WebApplication.CreateBuilder(args);
 builder.Services.AddRazorComponents()
     .AddInteractiveServerComponents();
+builder.Services.AddCascadingAuthenticationState();
+builder.Services.AddScoped<JwtAuthenticationStateProvider>();
+builder.Services.AddScoped<AuthenticationStateProvider>(sp => sp.GetRequiredService<JwtAuthenticationStateProvider>());
+builder.Services.AddAuthorizationCore();
+builder.Services.AddScoped<AuthHeaderHandler>();
+builder.Services.AddScoped(sp =>
+{
+    var handler = sp.GetRequiredService<AuthHeaderHandler>();
+    handler.InnerHandler = new HttpClientHandler();
+    return new HttpClient(handler)
+    {
+        BaseAddress = new Uri("https://localhost:7028/")
+    };
+});
+builder.Services.AddScoped<LibraryApiClient>();
 var app = builder.Build();
 // Configure the HTTP request pipeline.

BlazorFrontend/Providers/JwtAuthenticationStateProvider.cs ADDED Viewed

	@@ -0,0 +1,71 @@

+using Microsoft.AspNetCore.Components.Authorization;
+using Microsoft.AspNetCore.Components.Server.ProtectedBrowserStorage;
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+namespace BlazorFrontend.Providers;
+public class JwtAuthenticationStateProvider : AuthenticationStateProvider
+{
+    private readonly ProtectedLocalStorage _localStorage;
+    private readonly ClaimsPrincipal _anonymous = new(new ClaimsIdentity());
+    public string? Token { get; private set; }
+    public JwtAuthenticationStateProvider(ProtectedLocalStorage localStorage)
+    {
+        _localStorage = localStorage;
+    }
+    public override Task<AuthenticationState> GetAuthenticationStateAsync()
+    {
+        if (string.IsNullOrWhiteSpace(Token))
+            return Task.FromResult(new AuthenticationState(_anonymous));
+        try
+        {
+            var handler = new JwtSecurityTokenHandler();
+            var jwt = handler.ReadJwtToken(Token);
+            var identity = new ClaimsIdentity(jwt.Claims, "jwt");
+            var user = new ClaimsPrincipal(identity);
+            return Task.FromResult(new AuthenticationState(user));
+        }
+        catch
+        {
+            return Task.FromResult(new AuthenticationState(_anonymous));
+        }
+    }
+    public async Task LoadTokenAsync()
+    {
+        try
+        {
+            var tokenResult = await _localStorage.GetAsync<string>("AuthToken");
+            if (tokenResult.Success && !string.IsNullOrWhiteSpace(tokenResult.Value))
+            {
+                Token = tokenResult.Value;
+                NotifyAuthenticationStateChanged(GetAuthenticationStateAsync());
+            }
+        }
+        catch
+        {
+            // Ignore JS interop errors if they somehow still happen
+        }
+    }
+    public async Task LoginAsync(string token)
+    {
+        Token = token;
+        await _localStorage.SetAsync("AuthToken", token);
+        NotifyAuthenticationStateChanged(GetAuthenticationStateAsync());
+    }
+    public async Task LogoutAsync()
+    {
+        Token = null;
+        await _localStorage.DeleteAsync("AuthToken");
+        NotifyAuthenticationStateChanged(Task.FromResult(new AuthenticationState(_anonymous)));
+    }
+}

BlazorFrontend/Services/AuthHeaderHandler.cs ADDED Viewed

	@@ -0,0 +1,42 @@

+using Microsoft.AspNetCore.Components.Authorization;
+using System.Net.Http.Headers;
+using BlazorFrontend.Providers;
+namespace BlazorFrontend.Services;
+public class AuthHeaderHandler : DelegatingHandler
+{
+    private readonly AuthenticationStateProvider _authStateProvider;
+    public AuthHeaderHandler(AuthenticationStateProvider authStateProvider)
+    {
+        _authStateProvider = authStateProvider;
+    }
+    protected override async Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
+    {
+        Console.WriteLine("=== HANDLER RUN ===");
+        try
+        {
+            var jwtProvider = _authStateProvider as JwtAuthenticationStateProvider;
+            var token = jwtProvider?.Token;
+            if (!string.IsNullOrWhiteSpace(token))
+            {
+                Console.WriteLine("TOKEN FOUND: " + token);
+                request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token);
+            }
+            else
+            {
+                Console.WriteLine("NO TOKEN FOUND");
+            }
+        }
+        catch (Exception ex)
+        {
+            Console.WriteLine("ERROR: " + ex.Message);
+        }
+        return await base.SendAsync(request, cancellationToken);
+    }
+}

BlazorFrontend/Services/LibraryApiClient.cs ADDED Viewed

	@@ -0,0 +1,375 @@

+using System.Net.Http.Json;
+using System.Text.Json;
+using BlazorFrontend.Models.Dtos;
+namespace BlazorFrontend.Services
+{
+    public class LibraryApiClient
+    {
+        private readonly HttpClient _httpClient;
+        public LibraryApiClient(HttpClient httpClient)
+        {
+            _httpClient = httpClient;
+        }
+        // Note: You do NOT need to call a SetToken method anymore!
+        // Because we registered AuthHeaderHandler in Program.cs as a DelegatingHandler for "LibraryBackend",
+        // the JWT token is automatically injected into the headers of EVERY single request made by _httpClient.
+        #region Auth
+        public async Task<AuthResponse?> LoginAsync(LoginRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/auth/login", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<AuthResponse>() : null;
+        }
+        public async Task<AuthResponse?> RegisterAsync(RegisterRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/auth/register", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<AuthResponse>() : null;
+        }
+        public async Task<object?> GetProfileAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<object>("api/auth/me");
+        }
+        #endregion
+        #region Books
+        public async Task<IEnumerable<BookDto>> GetBooksAsync(int? categoryId = null)
+        {
+            var url = categoryId.HasValue ? $"api/books?categoryId={categoryId}" : "api/books";
+            return await _httpClient.GetFromJsonAsync<IEnumerable<BookDto>>(url) ?? Enumerable.Empty<BookDto>();
+        }
+        public async Task<BookDto?> GetBookAsync(int id)
+        {
+            return await _httpClient.GetFromJsonAsync<BookDto>($"api/books/{id}");
+        }
+        public async Task<BookDto?> CreateBookAsync(BookCreateRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/books", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<BookDto>() : null;
+        }
+        public async Task<BookDto?> UpdateBookAsync(int id, BookUpdateRequest request)
+        {
+            var response = await _httpClient.PutAsJsonAsync($"api/books/{id}", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<BookDto>() : null;
+        }
+        public async Task<bool> DeleteBookAsync(int id)
+        {
+            var response = await _httpClient.DeleteAsync($"api/books/{id}");
+            return response.IsSuccessStatusCode;
+        }
+        #endregion
+        #region Borrowings
+        public async Task<BorrowingDto?> BorrowBookAsync(BorrowRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/borrowings/borrow", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<BorrowingDto>() : null;
+        }
+        public async Task<BorrowingDto?> ReturnBookAsync(Guid id)
+        {
+            var response = await _httpClient.PostAsync($"api/borrowings/return/{id}", null);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<BorrowingDto>() : null;
+        }
+        public async Task<IEnumerable<BorrowingDto>> GetMyBorrowingsAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<BorrowingDto>>("api/borrowings/me") ?? Enumerable.Empty<BorrowingDto>();
+        }
+        public async Task<IEnumerable<BorrowingDto>> GetAllBorrowingsAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<BorrowingDto>>("api/borrowings") ?? Enumerable.Empty<BorrowingDto>();
+        }
+        #endregion
+        #region Categories
+        public async Task<IEnumerable<CategoryDto>> GetCategoriesAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<CategoryDto>>("api/categories") ?? Enumerable.Empty<CategoryDto>();
+        }
+        public async Task<IEnumerable<CategoryDto>> GetCategoriesWithBooksAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<CategoryDto>>("api/categories/with-books") ?? Enumerable.Empty<CategoryDto>();
+        }
+        public async Task<CategoryDto?> CreateCategoryAsync(CategoryCreateRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/categories", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<CategoryDto>() : null;
+        }
+        public async Task<bool> DeleteCategoryAsync(int id)
+        {
+            var response = await _httpClient.DeleteAsync($"api/categories/{id}");
+            return response.IsSuccessStatusCode;
+        }
+        #endregion
+        #region Subscriptions
+        public async Task<IEnumerable<MembershipDto>> GetMembershipsAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<MembershipDto>>("api/memberships") ?? Enumerable.Empty<MembershipDto>();
+        }
+        public async Task<SubscriptionDto?> GetMySubscriptionAsync()
+        {
+            try
+            {
+                return await _httpClient.GetFromJsonAsync<SubscriptionDto>("api/subscriptions/me");
+            }
+            catch { return null; }
+        }
+        public async Task<IEnumerable<SubscriptionDto>> GetMyAllSubscriptionsAsync()
+        {
+            try
+            {
+                return await _httpClient.GetFromJsonAsync<IEnumerable<SubscriptionDto>>("api/subscriptions/me/all") ?? Enumerable.Empty<SubscriptionDto>();
+            }
+            catch { return Enumerable.Empty<SubscriptionDto>(); }
+        }
+        public async Task<SubscriptionDto?> SubscribeAsync(SubscribeRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/subscriptions/subscribe", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<SubscriptionDto>() : null;
+        }
+        public async Task<SubscriptionDto?> GetUserSubscriptionAsync(Guid userId)
+        {
+            try
+            {
+                return await _httpClient.GetFromJsonAsync<SubscriptionDto>($"api/subscriptions/user/{userId}");
+            }
+            catch { return null; }
+        }
+        public async Task<SubscriptionDto?> AdminSubscribeAsync(AdminSubscribeRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/subscriptions/admin-subscribe", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<SubscriptionDto>() : null;
+        }
+        public async Task<IEnumerable<SubscriptionDto>> GetAllSubscriptionsAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<SubscriptionDto>>("api/subscriptions/all") ?? Enumerable.Empty<SubscriptionDto>();
+        }
+        #endregion
+        public async Task<LoyaltyAccountDto?> GetMyLoyaltyAccountAsync()
+        {
+            try
+            {
+                // Using exact casing for the route to be safe
+                var response = await _httpClient.GetAsync("api/Loyalty/my-account");
+                if (response.IsSuccessStatusCode)
+                {
+                    // JsonPropertyName attributes in LoyaltyAccountDto will handle the mapping
+                    // and correctly populate CurrentBalance from the backend's currentBalance
+                    return await response.Content.ReadFromJsonAsync<LoyaltyAccountDto>();
+                }
+                else
+                {
+                    var error = await response.Content.ReadAsStringAsync();
+                    System.Diagnostics.Debug.WriteLine($"Loyalty API error: {response.StatusCode} - {error}");
+                    // Throw custom exception or return null based on error
+                }
+                return null;
+            }
+            catch (Exception ex)
+            {
+                System.Diagnostics.Debug.WriteLine($"Loyalty API Exception: {ex.Message}");
+                return null;
+            }
+        }
+        public async Task<IEnumerable<LoyaltyRedemptionDto>> GetMyRedemptionsAsync()
+        {
+            try
+            {
+                return await _httpClient.GetFromJsonAsync<IEnumerable<LoyaltyRedemptionDto>>("api/Loyalty/my-redemptions") ?? Enumerable.Empty<LoyaltyRedemptionDto>();
+            }
+            catch { return Enumerable.Empty<LoyaltyRedemptionDto>(); }
+        }
+        public async Task<IEnumerable<LoyaltyRedemptionDto>> GetMyPendingRedemptionsAsync()
+        {
+            try
+            {
+                return await _httpClient.GetFromJsonAsync<IEnumerable<LoyaltyRedemptionDto>>("api/Loyalty/my-pending-redemptions") ?? Enumerable.Empty<LoyaltyRedemptionDto>();
+            }
+            catch { return Enumerable.Empty<LoyaltyRedemptionDto>(); }
+        }
+        public async Task<IEnumerable<PointHistoryEntryDto>> GetPointsHistoryAsync(string accountId)
+        {
+            try
+            {
+                var options = new JsonSerializerOptions { PropertyNameCaseInsensitive = true };
+                var response = await _httpClient.GetAsync($"api/v1/accounts/{accountId}/history");
+                if (response.IsSuccessStatusCode)
+                    return await response.Content.ReadFromJsonAsync<IEnumerable<PointHistoryEntryDto>>(options) ?? Enumerable.Empty<PointHistoryEntryDto>();
+                return Enumerable.Empty<PointHistoryEntryDto>();
+            }
+            catch { return Enumerable.Empty<PointHistoryEntryDto>(); }
+        }
+        public async Task<IEnumerable<UserPointsHistoryDto>> GetAllMembersPointsHistoryAsync()
+        {
+            try {
+                var options = new JsonSerializerOptions { PropertyNameCaseInsensitive = true };
+                var response = await _httpClient.GetAsync("api/Loyalty/admin/all-points-history");
+                var raw = await response.Content.ReadAsStringAsync();
+                if (!response.IsSuccessStatusCode)
+                    return Enumerable.Empty<UserPointsHistoryDto>();
+                var data = JsonSerializer.Deserialize<List<UserPointsHistoryDto>>(raw, options) ?? new List<UserPointsHistoryDto>();
+                foreach (var member in data)
+                {
+                    member.History = member.History?.ToList() ?? new List<PointHistoryEntryDto>();
+                    member.Redemptions = member.Redemptions?.ToList() ?? new List<LoyaltyRedemptionDto>();
+                }
+                return data;
+            } catch { return Enumerable.Empty<UserPointsHistoryDto>(); }
+        }
+        public async Task<bool> RequestReturnAsync(Guid borrowingId)
+        {
+            var response = await _httpClient.PostAsync($"api/borrowings/return-request/{borrowingId}", null);
+            return response.IsSuccessStatusCode;
+        }
+        public async Task<(bool Success, string Message)> ClaimRewardAsync(string rewardId, string? notes = null)
+        {
+            try
+            {
+                var request = new ClaimRewardRequestDto { RewardId = rewardId, Notes = notes };
+                var response = await _httpClient.PostAsJsonAsync("api/Loyalty/claim", request);
+                if (response.IsSuccessStatusCode)
+                {
+                    var result = await response.Content.ReadFromJsonAsync<JsonDocument>();
+                    string msg = "Reward claimed successfully!";
+                    if (result != null && result.RootElement.TryGetProperty("message", out var msgElement))
+                    {
+                        msg = msgElement.GetString() ?? msg;
+                    }
+                    return (true, msg);
+                }
+                else
+                {
+                    var error = await response.Content.ReadFromJsonAsync<JsonDocument>();
+                    string msg = "Failed to claim reward.";
+                    if (error != null && error.RootElement.TryGetProperty("message", out var msgElement))
+                    {
+                        msg = msgElement.GetString() ?? msg;
+                    }
+                    return (false, msg);
+                }
+            }
+            catch (Exception ex)
+            {
+                return (false, $"An error occurred: {ex.Message}");
+            }
+        }
+        public async Task<IEnumerable<LoyaltyRewardDto>> GetActiveRewardsAsync()
+        {
+            try
+            {
+                var client = new HttpClient();
+                return await client.GetFromJsonAsync<IEnumerable<LoyaltyRewardDto>>("http://150.95.88.91:4100/api/v1/rewards/active/THS-LMS") ?? Enumerable.Empty<LoyaltyRewardDto>();
+            }
+            catch { return Enumerable.Empty<LoyaltyRewardDto>(); }
+        }
+        #region Users
+        public async Task<IEnumerable<UserDto>> GetUsersAsync()
+        {
+            return await _httpClient.GetFromJsonAsync<IEnumerable<UserDto>>("api/users") ?? Enumerable.Empty<UserDto>();
+        }
+        public async Task<UserDto?> GetUserAsync(Guid id)
+        {
+            return await _httpClient.GetFromJsonAsync<UserDto>($"api/users/{id}");
+        }
+        public async Task<UserDto?> CreateUserAsync(UserCreateRequest request)
+        {
+            var response = await _httpClient.PostAsJsonAsync("api/users", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<UserDto>() : null;
+        }
+        public async Task<UserDto?> UpdateUserAsync(Guid id, UserUpdateRequest request)
+        {
+            var response = await _httpClient.PutAsJsonAsync($"api/users/{id}", request);
+            return response.IsSuccessStatusCode ? await response.Content.ReadFromJsonAsync<UserDto>() : null;
+        }
+        public async Task<bool> UpdateUserRoleAsync(Guid id, string role)
+        {
+            var response = await _httpClient.PutAsJsonAsync($"api/users/role/{id}", new UserRoleUpdateRequest { Role = role });
+            return response.IsSuccessStatusCode;
+        }
+        public async Task<bool> DeleteUserAsync(Guid id)
+        {
+            var response = await _httpClient.DeleteAsync($"api/users/{id}");
+            return response.IsSuccessStatusCode;
+        }
+        #endregion
+        public async Task<IEnumerable<LoyaltyRedemptionDto>> GetPendingRedemptionsAsync()
+        {
+            try
+            {
+                var response = await _httpClient.GetAsync("api/Loyalty/admin/redemptions/pending");
+                if (response.IsSuccessStatusCode)
+                {
+                    var options = new JsonSerializerOptions { PropertyNameCaseInsensitive = true };
+                    return await response.Content.ReadFromJsonAsync<IEnumerable<LoyaltyRedemptionDto>>(options) ?? Enumerable.Empty<LoyaltyRedemptionDto>();
+                }
+                return Enumerable.Empty<LoyaltyRedemptionDto>();
+            }
+            catch { return Enumerable.Empty<LoyaltyRedemptionDto>(); }
+        }
+        public async Task<(bool Success, string Message)> FulfillRedemptionAsync(string id)
+        {
+            try
+            {
+                var response = await _httpClient.PostAsync($"api/Loyalty/admin/redemptions/{id}/fulfill", null);
+                if (response.IsSuccessStatusCode)
+                {
+                    var result = await response.Content.ReadFromJsonAsync<JsonDocument>();
+                    string msg = "Redemption fulfilled successfully!";
+                    if (result != null && result.RootElement.TryGetProperty("message", out var msgElement))
+                    {
+                        msg = msgElement.GetString() ?? msg;
+                    }
+                    return (true, msg);
+                }
+                else
+                {
+                    var error = await response.Content.ReadFromJsonAsync<JsonDocument>();
+                    string msg = "Failed to fulfill redemption.";
+                    if (error != null && error.RootElement.TryGetProperty("message", out var msgElement))
+                    {
+                        msg = msgElement.GetString() ?? msg;
+                    }
+                    return (false, msg);
+                }
+            }
+            catch (Exception ex) { return (false, $"Error: {ex.Message}"); }
+        }
+    }
+}