Add GlobalSettingsBridge library

[justindbaur]

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-34549

📔 Objective

Introduces a new GlobalSettingsBridge library (src/Libraries/GlobalSettingsBridge/) that bridges globalSettings-style IConfiguration keys into the ASP.NET Core options pattern via IConfigureOptions<T>.

Calling services.AddGlobalSettingsBridge() registers three configurators:

• ConfigureSelfHostDetails — reads globalSettings:selfHosted / globalSettings:liteDeployment and populates SelfHostDetails (the SDK's environment type).
• ConfigureCorsOptions — reads globalSettings:baseServiceUri:vault and uses IBitwardenEnvironment.SelfHosted to configure the default CORS policy, replacing direct GlobalSettings usage in middleware setup.
• ConfigureForwardedHeadersOptions — reads globalSettings:knownProxies / globalSettings:knownNetworks, handles the nginx DNS lookup for non-lite self-hosted deployments, and sets ForwardLimit = null when multiple proxies/networks are configured.

The library has no dependency on Bit.Core or GlobalSettings directly — it reads all config via IConfiguration. It uses Bitwarden.Server.Sdk (with BitIncludeFeatures=false) to pick up the Bitwarden.Server.Sdk.Environment package.

This method is intended for services migrating away from direct GlobalSettings dependencies. New services should configure CorsOptions, ForwardedHeadersOptions, and SelfHostDetails directly.

📸 Screenshots

N/A — no UI changes.

[codecov]

Codecov Report

❌ Patch coverage is 92.77108% with 6 lines in your changes missing coverage. Please review.
✅ Project coverage is 63.06%. Comparing base (73ed2f6) to head (1f2dde6).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
...SettingsBridge/ConfigureForwardedHeadersOptions.cs	87.23%	6 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #8156       +/-   ##
===========================================
+ Coverage   15.10%   63.06%   +47.96%     
===========================================
  Files        1417     2319      +902     
  Lines       61422   100593    +39171     
  Branches     4901     9057     +4156     
===========================================
+ Hits         9279    63441    +54162     
+ Misses      51978    34963    -17015     
- Partials      165     2189     +2024     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

Reviewed the new GlobalSettingsBridge library, which bridges globalSettings:* configuration keys into SelfHostDetails, CorsOptions, and ForwardedHeadersOptions via IConfigureOptions<T>. Verified each configurator against the code it ports (CoreHelpers.IsCorsOriginAllowed and ServiceCollectionExtensions.UseForwardedHeaders) — the CORS origin predicate, proxy/network parsing, and ForwardLimit nulling are all behaviorally equivalent, and the Vault base service URI is a plain auto-property so reading it straight from IConfiguration matches the bound value. Registration uses TryAddEnumerable per ADR 0026, nullable reference types are on repo-wide, and the library is additive with no call sites migrated yet. Unit test coverage is good across all three configurators.

Code Review Details

• ❓ : app.UseCors() migration guidance in the XML remarks does not account for Identity's dev-only Swagger origin
  • src/Libraries/GlobalSettingsBridge/GlobalSettingsBridgeServiceCollectionExtensions.cs:25-30

Dependency Changes

Package	Change	Ecosystem
Bitwarden.Server.Sdk.Environment	0.1.0 (already in use elsewhere)	NuGet