feat(auth): enhance registration process to return tokens when email verification is not required and update login redirection message

Author: aalmada

src/BookStore.Web/Components/Pages/Register.razor

@@ -36,7 +36,7 @@
                 }
                 else
                 {
-                    <text> Redirecting to login...</text>
+                    <text> You are now logged in. Redirecting...</text>
                 }
             </MudAlert>
         }
@@ -239,7 +239,30 @@
             if (result.IsSuccess)
             {
                 registrationSuccess = true;
-                requiresVerification = true; // Safe default for UI message.
+
+                if (result.Value is { AccessToken: not null } loginResponse)
+                {
+                    // Email verification is not required — auto-login the user immediately.
+                    requiresVerification = false;
+                    await AuthStateProvider.NotifyUserAuthentication(loginResponse.AccessToken, loginResponse.RefreshToken);
+
+                    try
+                    {
+                        await JS.InvokeVoidAsync("authBroadcast.notifyLogin");
+                    }
+                    catch
+                    {
+                        // BroadcastChannel might not be available, continue anyway
+                    }
+
+                    await Task.Delay(1500);
+                    Navigation.NavigateTo("/");
+                }
+                else
+                {
+                    // Email verification is required — user must confirm email first.
+                    requiresVerification = true;
+                }
             }
             else
             {

src/BookStore.Web/Services/AuthenticationService.cs

@@ -74,31 +74,34 @@ public async Task<Result<LoginResponse>> LoginAsync(string email, string passwor
     }
 
     /// <summary>
-    /// Register a new user
+    /// Register a new user. Returns tokens when email verification is not required.
     /// </summary>
-    public async Task<Result> RegisterAsync(string email, string password,
+    public async Task<Result<LoginResponse?>> RegisterAsync(string email, string password,
         CancellationToken cancellationToken = default)
     {
         // Validate password strength
         var validationError = ValidatePassword(password);
         if (validationError != null)
         {
-            return Result.Failure(Error.Validation(ErrorCodes.Auth.PasswordMismatch, validationError));
+            return Result.Failure<LoginResponse?>(Error.Validation(ErrorCodes.Auth.PasswordMismatch, validationError));
         }
 
         try
         {
             var request = new RegisterRequest(email, password);
-            _ = await identityClient.RegisterAsync(request, cancellationToken);
-            return Result.Success();
+            var response = await identityClient.RegisterAsync(request, cancellationToken);
+            // When email verification is not required the server returns a full LoginResponse with tokens.
+            // When verification is required it returns an anonymous message object, so AccessToken is null.
+            return Result.Success<LoginResponse?>(
+                string.IsNullOrEmpty(response?.AccessToken) ? null : response);
         }
         catch (Refit.ApiException ex)
         {
-            return ex.ToResult();
+            return ex.ToResult<LoginResponse?>();
         }
         catch (Exception ex)
         {
-            return Result.Failure(Error.Failure("ERR_REGISTRATION_FAILED", ex.Message));
+            return Result.Failure<LoginResponse?>(Error.Failure("ERR_REGISTRATION_FAILED", ex.Message));
         }
     }