From 6f49a663ea555e0abf5145fe1da7dbe2d7c06181 Mon Sep 17 00:00:00 2001
From: Pierre Arnaud <arnaud@epsitec.ch>
Date: Fri, 30 Jan 2026 19:20:03 +0100
Subject: [PATCH] Phase 4: Inject authentication service into RuntimeController
 and set token

---
 .../RuntimeControllerAspNetDotnetFirstSignalR.cs         | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/ElectronNET.AspNet/Runtime/Controllers/RuntimeControllerAspNetDotnetFirstSignalR.cs b/src/ElectronNET.AspNet/Runtime/Controllers/RuntimeControllerAspNetDotnetFirstSignalR.cs
index a39329f..5c0f067 100644
--- a/src/ElectronNET.AspNet/Runtime/Controllers/RuntimeControllerAspNetDotnetFirstSignalR.cs
+++ b/src/ElectronNET.AspNet/Runtime/Controllers/RuntimeControllerAspNetDotnetFirstSignalR.cs
@@ -13,6 +13,7 @@ namespace ElectronNET.AspNet.Runtime
     using Microsoft.AspNetCore.Hosting.Server.Features;
     using Microsoft.AspNetCore.SignalR;
     using ElectronNET.AspNet.Hubs;
+    using ElectronNET.AspNet.Services;
 
     /// <summary>
     /// Runtime controller for SignalR-based .NET-first startup mode.
@@ -27,6 +28,7 @@ namespace ElectronNET.AspNet.Runtime
         private ElectronProcessBase electronProcess;
         private readonly IServer server;
         private readonly IHubContext<ElectronHub> hubContext;
+        private readonly IElectronAuthenticationService authenticationService;
         private SignalRFacade signalRFacade;
         private int? port;
         private string actualUrl;
@@ -36,11 +38,13 @@ namespace ElectronNET.AspNet.Runtime
         public RuntimeControllerAspNetDotnetFirstSignalR(
             AspNetLifetimeAdapter aspNetLifetimeAdapter, 
             IServer server,
-            IHubContext<ElectronHub> hubContext) 
+            IHubContext<ElectronHub> hubContext,
+            IElectronAuthenticationService authenticationService) 
             : base(aspNetLifetimeAdapter)
         {
             this.server = server;
             this.hubContext = hubContext;
+            this.authenticationService = authenticationService;
             this.signalRFacade = new SignalRFacade(hubContext);
             this.electronLaunched = false;
             
@@ -112,6 +116,9 @@ namespace ElectronNET.AspNet.Runtime
             // Generate secure authentication token
             this.authenticationToken = Guid.NewGuid().ToString("N"); // 32 hex chars, no hyphens
             
+            // Register token with authentication service for validation
+            this.authenticationService.SetExpectedToken(this.authenticationToken);
+            
             var isUnPacked = ElectronNetRuntime.StartupMethod.IsUnpackaged();
             var flag = isUnPacked ? "--unpackeddotnetsignalr" : "--dotnetpackedsignalr";
             var args = $"{flag} --electronurl={this.actualUrl} --authtoken={this.authenticationToken}";