Add OAuth 2.0 support and flexible user metadata with JSONB storage

src/GZCTF.Integration.Test/Base/GZCTFApplicationFactory.cs

@@ -1,3 +1,4 @@
+using System.Net.Http.Json;
 using GZCTF.Models;
 using GZCTF.Services.Container.Manager;
 using GZCTF.Services.Container.Provider;
@@ -262,6 +263,25 @@ public async Task InitializeAsync()
         await context.Database.MigrateAsync();
     }
 
+    /// <summary>
+    /// Create an authenticated HTTP client for the given user
+    /// </summary>
+    public HttpClient CreateAuthenticatedClient(TestDataSeeder.SeededUser user)
+    {
+        var client = CreateClient();
+
+        // Login the user
+        var loginResponse = client.PostAsJsonAsync("/api/Account/LogIn", new
+        {
+            UserName = user.UserName,
+            Password = user.Password
+        }).Result;
+
+        loginResponse.EnsureSuccessStatusCode();
+
+        return client;
+    }
+
     public new async Task DisposeAsync()
     {
         // Dispose containers

src/GZCTF.Integration.Test/Base/TestDataSeeder.cs

@@ -68,11 +68,11 @@ public static async Task<int> GetOrCreateInviteGameAsync(IServiceProvider servic
             // Set game invite code
             using var scope = services.CreateScope();
             var gameRepo = scope.ServiceProvider.GetRequiredService<IGameRepository>();
-            var gameEntity = await gameRepo.GetGameById(game.Id, default);
+            var gameEntity = await gameRepo.GetGameById(game.Id);
             if (gameEntity != null)
             {
                 gameEntity.InviteCode = "SHARED_INVITE_2025";
-                await gameRepo.SaveAsync(default);
+                await gameRepo.SaveAsync();
             }
 
             _sharedInviteGameId = game.Id;
@@ -398,6 +398,23 @@ private static string NormalizeTeamName(string? teamName)
         return trimmed;
     }
 
+    /// <summary>
+    /// Create a user with specific role
+    /// </summary>
+    public static async Task<(SeededUser user, string password)> CreateUserWithRoleAsync(
+        IServiceProvider services,
+        Role role = Role.User,
+        CancellationToken token = default)
+    {
+        var password = $"Test{role}Pass123!";
+        var userName = RandomName();
+        var email = $"{userName}@test.com";
+
+        var user = await CreateUserAsync(services, userName, password, email, role, token);
+
+        return (user, password);
+    }
+
     public record SeededUser(Guid Id, string UserName, string Email, string Password, Role Role);
 
     public record SeededTeam(int Id, string Name, Guid OwnerId);

src/GZCTF.Integration.Test/Tests/Api/AdvancedGameMechanicsTests.cs

@@ -50,7 +50,7 @@ public async Task ChallengeSubmissionLimit_ShouldPreventExcessiveSubmissions()
                 Content = "Challenge with submission limit",
                 Category = ChallengeCategory.Misc,
                 Type = ChallengeType.StaticAttachment,
-                Hints = new List<string>(),
+                Hints = [],
                 IsEnabled = true,
                 SubmissionLimit = 3, // Limit to 3 submissions
                 OriginalScore = 100,
@@ -131,7 +131,7 @@ public async Task ChallengeDeadline_ShouldPreventSubmissionsAfterDeadline()
                 Content = "Challenge with past deadline",
                 Category = ChallengeCategory.Misc,
                 Type = ChallengeType.StaticAttachment,
-                Hints = new List<string>(),
+                Hints = [],
                 IsEnabled = true,
                 SubmissionLimit = 0, // No submission limit
                 DeadlineUtc = DateTimeOffset.UtcNow.AddMinutes(-5), // Deadline 5 minutes ago
@@ -375,7 +375,7 @@ public async Task ChallengeDisabling_ShouldUpdateScoreboard()
                 Content = "Challenge to toggle",
                 Category = ChallengeCategory.Misc,
                 Type = ChallengeType.StaticAttachment,
-                Hints = new List<string>(),
+                Hints = [],
                 IsEnabled = true,
                 SubmissionLimit = 0,
                 OriginalScore = 200,
@@ -565,7 +565,7 @@ public async Task ChallengeReEnabling_ShouldRestoreChallengeAvailability()
                 Content = "Challenge to re-enable",
                 Category = ChallengeCategory.Misc,
                 Type = ChallengeType.StaticAttachment,
-                Hints = new List<string>(),
+                Hints = [],
                 IsEnabled = true,
                 SubmissionLimit = 0,
                 OriginalScore = 150,