[Profile] Editable profile (avatar + resume) + role-based profile dropdown menu

Every user gets a full editable profile at /Me/Profile: name, role, city, specialty/title, license, years, bio + avatar image upload + resume upload (PDF/image). Avatar/resume stored in-DB on User (migration, 5 nullable columns). Endpoints: /avatar/{id} (public) and /resume/{id} (owner, admin, or an employer who received that user's application). Nav: replaced the scattered action links with an avatar button + dropdown listing all of the user's pages by role (profile, کارجو panel, alerts, preferences, notifications; employer panel; admin panel + settings; logout) — shows the avatar image or initials; collapses into the burger menu on mobile; closes on outside-click.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/JobsMedical.Web/Pages/Me/Profile.cshtml

@@ -0,0 +1,98 @@
+@page
+@model JobsMedical.Web.Pages.Me.ProfileModel
+@{
+    ViewData["Title"] = "پروفایل من";
+}
+
+<div class="page-head">
+    <div class="container">
+        <h1>پروفایل من</h1>
+        <p class="muted"><a asp-page="/Me/Index">← پنل کارجو</a></p>
+    </div>
+</div>
+
+<div class="container section" style="max-width:680px;">
+    @if (Model.Msg is not null) { <div class="alert alert-success">@Model.Msg</div> }
+
+    <form method="post" enctype="multipart/form-data" class="card card-pad">
+        <div style="display:flex; gap:16px; align-items:center; flex-wrap:wrap; margin-bottom:14px;">
+            <div class="avatar-lg">
+                @if (Model.HasAvatar)
+                {
+                    <img src="/avatar/@User.FindFirst(System.Security.Claims.ClaimTypes.NameIdentifier)!.Value" alt="avatar" />
+                }
+                else
+                {
+                    <span>@((Model.FullName ?? Model.Phone).Trim().Substring(0,1))</span>
+                }
+            </div>
+            <div style="flex:1; min-width:200px;">
+                <label>تصویر پروفایل</label>
+                <input type="file" name="avatar" accept="image/jpeg,image/png,image/webp" />
+                <p class="muted" style="font-size:12px; margin:4px 0 0;">JPG/PNG/WebP، حداکثر ۲ مگابایت.</p>
+                @if (Model.HasAvatar)
+                {
+                    <button type="submit" asp-page-handler="DeleteAvatar" class="btn btn-outline" style="padding:3px 10px; font-size:12px; margin-top:6px;">حذف تصویر</button>
+                }
+            </div>
+        </div>
+
+        <div class="filter-group">
+            <label>نام و نام خانوادگی</label>
+            <input type="text" name="FullName" value="@Model.FullName" placeholder="مثلاً دکتر زهرا احمدی" />
+        </div>
+        <div class="filter-group">
+            <label>شماره موبایل</label>
+            <input type="text" value="@JalaliDate.ToPersianDigits(Model.Phone)" dir="ltr" disabled />
+        </div>
+        <div style="display:flex; gap:8px; flex-wrap:wrap;">
+            <div class="filter-group" style="flex:1; min-width:160px;">
+                <label>نقش</label>
+                <select name="RoleId">
+                    <option value="">انتخاب نشده</option>
+                    @foreach (var r in Model.Roles) { <option value="@r.Id" selected="@(Model.RoleId == r.Id)">@r.Name</option> }
+                </select>
+            </div>
+            <div class="filter-group" style="flex:1; min-width:160px;">
+                <label>شهر</label>
+                <select name="CityId">
+                    <option value="">انتخاب نشده</option>
+                    @foreach (var c in Model.Cities) { <option value="@c.Id" selected="@(Model.CityId == c.Id)">@c.Name</option> }
+                </select>
+            </div>
+        </div>
+        <div style="display:flex; gap:8px; flex-wrap:wrap;">
+            <div class="filter-group" style="flex:1; min-width:160px;">
+                <label>تخصص / سمت</label>
+                <input type="text" name="Specialty" value="@Model.Specialty" placeholder="مثلاً پرستار ICU" />
+            </div>
+            <div class="filter-group" style="flex:1; min-width:120px;">
+                <label>سابقه (سال)</label>
+                <input type="number" name="YearsExperience" min="0" max="70" value="@Model.YearsExperience" dir="ltr" />
+            </div>
+        </div>
+        <div class="filter-group">
+            <label>شماره نظام پزشکی/پرستاری (اختیاری)</label>
+            <input type="text" name="LicenseNo" value="@Model.LicenseNo" dir="ltr" />
+        </div>
+        <div class="filter-group">
+            <label>درباره من</label>
+            <textarea name="Bio" rows="4" placeholder="معرفی کوتاه، مهارت‌ها و سابقه...">@Model.Bio</textarea>
+        </div>
+
+        <div class="filter-group">
+            <label>رزومه (رزومه شغلی)</label>
+            @if (Model.ResumeName is not null)
+            {
+                <p style="margin:0 0 6px;">
+                    <a href="/resume/@User.FindFirst(System.Security.Claims.ClaimTypes.NameIdentifier)!.Value" target="_blank">📎 @Model.ResumeName</a>
+                    <button type="submit" asp-page-handler="DeleteResume" class="btn btn-outline" style="padding:3px 10px; font-size:12px; margin-inline-start:8px; color:var(--danger); border-color:var(--danger);">حذف</button>
+                </p>
+            }
+            <input type="file" name="resume" accept="image/jpeg,image/png,image/webp,application/pdf" />
+            <p class="muted" style="font-size:12px; margin:4px 0 0;">PDF یا تصویر، حداکثر ۵ مگابایت. مراکز درمانی هنگام بررسی درخواست شما می‌توانند آن را ببینند.</p>
+        </div>
+
+        <button type="submit" class="btn btn-accent btn-block btn-lg">ذخیره پروفایل</button>
+    </form>
+</div>

src/JobsMedical.Web/Pages/Me/Profile.cshtml.cs

@@ -0,0 +1,123 @@
+using System.Security.Claims;
+using JobsMedical.Web.Data;
+using JobsMedical.Web.Models;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.EntityFrameworkCore;
+
+namespace JobsMedical.Web.Pages.Me;
+
+[Authorize]
+public class ProfileModel : PageModel
+{
+    private readonly AppDbContext _db;
+    public ProfileModel(AppDbContext db) => _db = db;
+
+    public List<Role> Roles { get; private set; } = new();
+    public List<City> Cities { get; private set; } = new();
+    public bool HasAvatar { get; private set; }
+    public string? ResumeName { get; private set; }
+    public string Phone { get; private set; } = "";
+    [TempData] public string? Msg { get; set; }
+
+    [BindProperty] public string? FullName { get; set; }
+    [BindProperty] public int? RoleId { get; set; }
+    [BindProperty] public int? CityId { get; set; }
+    [BindProperty] public string? Specialty { get; set; }
+    [BindProperty] public string? LicenseNo { get; set; }
+    [BindProperty] public int YearsExperience { get; set; }
+    [BindProperty] public string? Bio { get; set; }
+
+    private int Uid => int.Parse(User.FindFirstValue(ClaimTypes.NameIdentifier)!);
+    private static readonly string[] ImgTypes = { "image/jpeg", "image/png", "image/webp" };
+    private static readonly string[] DocTypes = { "image/jpeg", "image/png", "image/webp", "application/pdf" };
+    private const long MaxImg = 2 * 1024 * 1024;   // 2 MB
+    private const long MaxDoc = 5 * 1024 * 1024;   // 5 MB
+
+    public async Task OnGetAsync()
+    {
+        await LoadListsAsync();
+        var u = await _db.Users.Include(x => x.DoctorProfile).FirstAsync(x => x.Id == Uid);
+        Phone = u.Phone;
+        FullName = u.FullName;
+        HasAvatar = u.Avatar != null;
+        ResumeName = u.ResumeFileName;
+        var p = u.DoctorProfile;
+        RoleId = p?.RoleId;
+        CityId = p?.CityId;
+        Specialty = p?.Specialty;
+        LicenseNo = p?.LicenseNo;
+        YearsExperience = p?.YearsExperience ?? 0;
+        Bio = p?.Bio;
+    }
+
+    public async Task<IActionResult> OnPostAsync(IFormFile? avatar, IFormFile? resume)
+    {
+        var u = await _db.Users.Include(x => x.DoctorProfile).FirstAsync(x => x.Id == Uid);
+
+        u.FullName = string.IsNullOrWhiteSpace(FullName) ? null : FullName.Trim();
+        var p = u.DoctorProfile ??= new DoctorProfile { UserId = Uid };
+        p.RoleId = RoleId;
+        p.CityId = CityId;
+        p.Specialty = string.IsNullOrWhiteSpace(Specialty) ? "پزشک عمومی" : Specialty.Trim();
+        p.LicenseNo = LicenseNo?.Trim();
+        p.YearsExperience = Math.Clamp(YearsExperience, 0, 70);
+        p.Bio = Bio?.Trim();
+
+        string? warn = null;
+        if (avatar is { Length: > 0 })
+        {
+            if (avatar.Length > MaxImg || !ImgTypes.Contains((avatar.ContentType ?? "").ToLowerInvariant()))
+                warn = "تصویر باید JPG/PNG/WebP و کمتر از ۲ مگابایت باشد.";
+            else
+            {
+                using var ms = new MemoryStream();
+                await avatar.CopyToAsync(ms);
+                u.Avatar = ms.ToArray();
+                u.AvatarContentType = avatar.ContentType!.ToLowerInvariant();
+            }
+        }
+        if (resume is { Length: > 0 })
+        {
+            if (resume.Length > MaxDoc || !DocTypes.Contains((resume.ContentType ?? "").ToLowerInvariant()))
+                warn = (warn is null ? "" : warn + " ") + "رزومه باید PDF یا تصویر و کمتر از ۵ مگابایت باشد.";
+            else
+            {
+                using var ms = new MemoryStream();
+                await resume.CopyToAsync(ms);
+                u.Resume = ms.ToArray();
+                u.ResumeContentType = resume.ContentType!.ToLowerInvariant();
+                u.ResumeFileName = Path.GetFileName(resume.FileName);
+            }
+        }
+
+        await _db.SaveChangesAsync();
+        Msg = warn ?? "پروفایل ذخیره شد.";
+        return RedirectToPage();
+    }
+
+    public async Task<IActionResult> OnPostDeleteResumeAsync()
+    {
+        var u = await _db.Users.FirstAsync(x => x.Id == Uid);
+        u.Resume = null; u.ResumeFileName = null; u.ResumeContentType = null;
+        await _db.SaveChangesAsync();
+        Msg = "رزومه حذف شد.";
+        return RedirectToPage();
+    }
+
+    public async Task<IActionResult> OnPostDeleteAvatarAsync()
+    {
+        var u = await _db.Users.FirstAsync(x => x.Id == Uid);
+        u.Avatar = null; u.AvatarContentType = null;
+        await _db.SaveChangesAsync();
+        Msg = "تصویر حذف شد.";
+        return RedirectToPage();
+    }
+
+    private async Task LoadListsAsync()
+    {
+        Roles = await _db.Roles.Where(r => r.IsActive).OrderBy(r => r.SortOrder).ToListAsync();
+        Cities = await _db.Cities.Where(c => c.IsActive).OrderBy(c => c.Name).ToListAsync();
+    }
+}

src/JobsMedical.Web/Pages/Shared/_Layout.cshtml

@@ -1,12 +1,22 @@
 @using System.Security.Claims
+@using Microsoft.EntityFrameworkCore
 @inject JobsMedical.Web.Services.NotificationService Notifications
+@inject JobsMedical.Web.Data.AppDbContext Db
 @{
     var title = ViewData["Title"] as string;
     int unreadCount = 0;
-    if (User.Identity?.IsAuthenticated == true && int.TryParse(User.FindFirstValue(ClaimTypes.NameIdentifier), out var _uid))
+    int meId = 0;
+    string? meName = null;
+    bool meHasAvatar = false;
+    if (User.Identity?.IsAuthenticated == true && int.TryParse(User.FindFirstValue(ClaimTypes.NameIdentifier), out meId))
     {
-        unreadCount = await Notifications.UnreadCountAsync(_uid);
+        unreadCount = await Notifications.UnreadCountAsync(meId);
+        var info = await Db.Users.Where(u => u.Id == meId)
+            .Select(u => new { u.FullName, u.Phone, HasAvatar = u.Avatar != null }).FirstOrDefaultAsync();
+        meName = string.IsNullOrWhiteSpace(info?.FullName) ? info?.Phone : info!.FullName;
+        meHasAvatar = info?.HasAvatar ?? false;
     }
+    var meInitial = string.IsNullOrWhiteSpace(meName) ? "؟" : meName!.Trim().Substring(0, 1);
 }
 <!DOCTYPE html>
 <html lang="fa" dir="rtl">
@@ -62,20 +72,44 @@
                 <div class="header-actions">
                     @if (User.Identity?.IsAuthenticated == true)
                     {
-                        @if (User.IsInRole("Admin"))
-                        {
-                            <a class="nav-action" asp-page="/Admin/Overview">پنل مدیریت</a>
-                            <a class="nav-action" asp-page="/Admin/Settings">تنظیمات</a>
-                        }
-                        @if (User.IsInRole("FacilityAdmin"))
-                        {
-                            <a class="nav-action" asp-page="/Employer/Index">پنل کارفرما</a>
-                        }
                         <a class="nav-action bell-inline js-bell" asp-page="/Me/Notifications" title="اعلان‌ها" data-tour="bell"><span class="bell-ico">🔔</span><span class="bell-label">اعلان‌ها</span>@if (unreadCount > 0) {<span class="bell-badge">@JalaliDate.ToPersianDigits(unreadCount > 99 ? "99+" : unreadCount.ToString())</span>}</a>
-                        <a class="nav-action" asp-page="/Me/Index" data-tour="panel">پنل کارجو</a>
-                        <form method="post" asp-page="/Account/Logout" style="display:contents;">
-                            <button type="submit" class="btn btn-outline btn-sm">خروج</button>
-                        </form>
+
+                        <div class="profile-menu">
+                            <input type="checkbox" id="profile-toggle" class="profile-toggle" hidden />
+                            <label for="profile-toggle" class="avatar-btn" data-tour="profile" aria-label="منوی کاربر">
+                                @if (meHasAvatar)
+                                {
+                                    <img class="avatar-img" src="/avatar/@meId" alt="پروفایل" />
+                                }
+                                else
+                                {
+                                    <span class="avatar-fallback">@meInitial</span>
+                                }
+                                <span class="avatar-caret">▾</span>
+                            </label>
+                            <nav class="profile-dropdown">
+                                <div class="pd-head">@meName</div>
+                                <a asp-page="/Me/Profile">👤 ویرایش پروفایل</a>
+                                <a asp-page="/Me/Index" data-tour="panel">🗂️ پنل کارجو</a>
+                                <a asp-page="/Me/Alerts">🔎 هشدارهای شغلی</a>
+                                <a asp-page="/Preferences/Index">⭐ علاقه‌مندی‌ها</a>
+                                <a asp-page="/Me/Notifications">🔔 اعلان‌ها@if (unreadCount > 0) {<span class="bell-badge" style="position:static; margin-inline-start:6px;">@JalaliDate.ToPersianDigits(unreadCount > 99 ? "99+" : unreadCount.ToString())</span>}</a>
+                                @if (User.IsInRole("FacilityAdmin"))
+                                {
+                                    <a asp-page="/Employer/Index">🏥 پنل کارفرما</a>
+                                }
+                                @if (User.IsInRole("Admin"))
+                                {
+                                    <div class="pd-sep"></div>
+                                    <a asp-page="/Admin/Overview">🛠️ پنل مدیریت</a>
+                                    <a asp-page="/Admin/Settings">⚙️ تنظیمات</a>
+                                }
+                                <div class="pd-sep"></div>
+                                <form method="post" asp-page="/Account/Logout">
+                                    <button type="submit" class="pd-logout">🚪 خروج</button>
+                                </form>
+                            </nav>
+                        </div>
                     }
                     else
                     {
@@ -122,6 +156,14 @@
     @* Self-hosted guided app tour (no CDN). Auto-runs once for new visitors; re-runnable from /Help. *@
     <script src="~/js/tour.js" asp-append-version="true" defer></script>
 
+    @* Close the profile dropdown when clicking outside it. *@
+    <script>
+        document.addEventListener('click', function (e) {
+            var t = document.getElementById('profile-toggle');
+            if (t && t.checked && !e.target.closest('.profile-menu')) t.checked = false;
+        });
+    </script>
+
     @* Live in-app notifications over SSE (our own origin — works in Iran, no Google push).
        Updates the bell badge, shows a toast, and fires a local OS notification when allowed. *@
     @if (User.Identity?.IsAuthenticated == true)