כניסה עם Google — הרחבת רשות

--- a/RazorTaba/Program.cs
+++ b/RazorTaba/Program.cs
@@ -25,8 +25,20 @@ builder.Services.ConfigureApplicationCookie(options =>
     options.LoginPath = "/Account/Login";
     options.AccessDeniedPath = "/Account/Denied";
 });

+// Google הוא תוספת בלבד: בלי הגדרות מקומיות, הכניסה הרגילה ממשיכה לעבוד.
+string? googleId = builder.Configuration["Authentication:Google:ClientId"];
+string? googleSecret = builder.Configuration["Authentication:Google:ClientSecret"];
+if (!string.IsNullOrWhiteSpace(googleId) && !string.IsNullOrWhiteSpace(googleSecret))
+{
+    builder.Services.AddAuthentication().AddGoogle(options =>
+    {
+        options.ClientId = googleId;
+        options.ClientSecret = googleSecret;
+    });
+}
+
 var app = builder.Build();
 if (!app.Environment.IsDevelopment())
 {
     app.UseExceptionHandler("/Error");

--- a/RazorTaba/RazorTaba.csproj
+++ b/RazorTaba/RazorTaba.csproj
@@ -3,18 +3,20 @@
   <PropertyGroup>
     <TargetFramework>net10.0</TargetFramework>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
+    <UserSecretsId>razortaba-local-development</UserSecretsId>
   </PropertyGroup>

   <ItemGroup>
     <PackageReference Include="HtmlSanitizer" Version="9.2.1039" />
     <PackageReference Include="Markdig" Version="1.3.2" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.Google" Version="10.0.10" />
     <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.10" />
     <PackageReference Include="Microsoft.AspNetCore.Identity.UI" Version="10.0.10" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10">
-      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
-      <PrivateAssets>all</PrivateAssets>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.10" />
     <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
   </ItemGroup>

--- a/RazorTaba/Pages/Account/Login.cshtml.cs
+++ b/RazorTaba/Pages/Account/Login.cshtml.cs
@@ -6,10 +6,14 @@ using Microsoft.AspNetCore.Mvc.RazorPages;

 namespace RazorTaba.Pages.Account;

 /// <summary>מאמת סיסמה באמצעות Identity ומאפשר רק חזרה לכתובת מקומית.</summary>
-public class LoginModel(SignInManager<AppUser> signIn) : PageModel
+public class LoginModel(SignInManager<AppUser> signIn, IConfiguration configuration) : PageModel
 {
+    public bool GoogleEnabled =>
+        !string.IsNullOrWhiteSpace(configuration["Authentication:Google:ClientId"]) &&
+        !string.IsNullOrWhiteSpace(configuration["Authentication:Google:ClientSecret"]);
+
     [BindProperty, Required, EmailAddress]
     public string Email { get; set; } = "";
     [BindProperty, Required, DataType(DataType.Password)]
     public string Password { get; set; } = "";

--- a/RazorTaba/Pages/Account/Login.cshtml
+++ b/RazorTaba/Pages/Account/Login.cshtml
@@ -9,4 +9,11 @@
     <label asp-for="Password">סיסמה</label><input asp-for="Password" class="form-control mb-3" autocomplete="current-password" dir="ltr" />
     <button class="btn btn-primary">כניסה</button>
 </form>
 <a asp-page="Register">עדיין אין לכם חשבון?</a>
+
+@if (Model.GoogleEnabled)
+{
+    <form asp-area="Identity" asp-page="/Account/ExternalLogin" asp-route-returnUrl="/" method="post" class="mt-4">
+        <button class="btn btn-outline-primary" name="provider" value="Google">כניסה עם Google</button>
+    </form>
+}