book

ASP.NET Core in Action, Second Edition

Name: ASP.NET Core in Action, Second Edition
Author: Andrew Lock
ISBN: 9781617298301

by Andrew Lock

May 2021

Intermediate to advanced

832 pages

25h 39m

English

Manning Publications

Read now

Unlock full access

inside front cover
ASP.NET Core in Action
Copyright
brief contents
contents
front matter
prefaceacknowledgmentsabout this bookWho should read this bookHow this book is organized: A roadmapAbout the codeliveBook discussion forumabout the authorabout the cover illustration
Part 1. Getting started with ASP.NET Core
1 Getting started with ASP.NET Core
1.1 An introduction to ASP.NET Core1.1.1 Using a web framework1.1.2 What is ASP.NET Core?1.2 When to choose ASP.NET Core1.2.1 What type of applications can you build?1.2.2 If you’re new to .NET development1.2.3 If you’re a .NET Framework developer creating a new application1.2.4 Converting an existing ASP.NET application to ASP.NET Core1.3 How does ASP.NET Core work?1.3.1 How does an HTTP web request work?1.3.2 How does ASP.NET Core process a request?1.4 What you will learn in this bookSummary
2 Your first application
2.1 A brief overview of an ASP.NET Core application2.2 Creating your first ASP.NET Core application2.2.1 Using a template to get started2.2.2 Building the application2.3 Running the web application2.4 Understanding the project layout2.5 The .csproj project file: Defining your dependencies2.6 The Program class: Building a web host2.7 The Startup class: Configuring your application2.7.1 Adding and configuring services2.7.2 Defining how requests are handled with middleware2.8 Generating responses with Razor Pages2.8.1 Generating HTML with Razor Pages2.8.2 Handling request logic with PageModels and handlersSummary
3 Handling requests with the middleware pipeline
3.1 What is middleware?3.2 Combining middleware in a pipeline3.2.1 Simple pipeline scenario 1: A holding page3.2.2 Simple pipeline scenario 2: Handling static files3.2.3 Simple pipeline scenario 3: A Razor Pages application3.3 Handling errors using middleware3.3.1 Viewing exceptions in development: DeveloperExceptionPage3.3.2 Handling exceptions in production: ExceptionHandlerMiddleware3.3.3 Handling other errors: StatusCodePagesMiddleware3.3.4 Error handling middleware and Web APIsSummary

4 Creating a website with Razor Pages
4.1 An introduction to Razor Pages4.1.1 Exploring a typical Razor Page4.1.2 The MVC design pattern4.1.3 Applying the MVC design pattern to Razor Pages4.1.4 Adding Razor Pages to your application4.2 Razor Pages vs. MVC in ASP.NET Core4.2.1 MVC controllers in ASP.NET Core4.2.2 The benefits of Razor Pages4.2.3 When to choose MVC controllers over Razor Pages4.3 Razor Pages and page handlers4.3.1 Accepting parameters to page handlers4.3.2 Returning responses with ActionResultsSummary
5 Mapping URLs to Razor Pages using routing
5.1 What is routing?5.2 Routing in ASP.NET Core5.2.1 Using endpoint routing in ASP.NET Core5.2.2 Convention-based routing vs. attribute routing5.2.3 Routing to Razor Pages5.3 Customizing Razor Page route templates5.3.1 Adding a segment to a Razor Page route template5.3.2 Replacing a Razor Page route template completely5.4 Exploring the route template syntax5.4.1 Using optional and default values5.4.2 Adding additional constraints to route parameters5.4.3 Matching arbitrary URLs with the catch-all parameter5.5 Generating URLs from route parameters5.5.1 Generating URLs for a Razor Page5.5.2 Generating URLs for an MVC controller5.5.3 Generating URLs with ActionResults5.5.4 Generating URLs from other parts of your application5.6 Selecting a page handler to invoke5.7 Customizing conventions with Razor PagesSummary
6 The binding model: Retrieving and validating user input
6.1 Understanding the models in Razor Pages and MVC6.2 From request to model: Making the request useful6.2.1 Binding simple types6.2.2 Binding complex types6.2.3 Choosing a binding source6.3 Handling user input with model validation6.3.1 The need for validation6.3.2 Using DataAnnotations attributes for validation6.3.3 Validating on the server for safety6.3.4 Validating on the client for user experience6.4 Organizing your binding models in Razor PagesSummary
7 Rendering HTML using Razor views
7.1 Views: Rendering the user interface7.2 Creating Razor views7.2.1 Razor views and code-behind7.2.2 Introducing Razor templates7.2.3 Passing data to views7.3 Creating dynamic web pages with Razor7.3.1 Using C# in Razor templates7.3.2 Adding loops and conditionals to Razor templates7.3.3 Rendering HTML with Raw7.4 Layouts, partial views, and _ViewStart7.4.1 Using layouts for shared markup7.4.2 Overriding parent layouts using sections7.4.3 Using partial views to encapsulate markup7.4.4 Running code on every view with _ViewStart and _ViewImports7.5 Selecting a view from an MVC controllerSummary
8 Building forms with Tag Helpers
8.1 Catering to editors with Tag Helpers8.2 Creating forms using Tag Helpers8.2.1 The Form Tag Helper8.2.2 The Label Tag Helper8.2.3 The Input and Textarea Tag Helpers8.2.4 The Select Tag Helper8.2.5 The Validation Message and Validation Summary Tag Helpers8.3 Generating links with the Anchor Tag Helper8.4 Cache-busting with the Append Version Tag Helper8.5 Using conditional markup with the Environment Tag HelperSummary
9 Creating a Web API for mobile and client applications using MVC
9.1 What is a Web API and when should you use one?9.2 Creating your first Web API project9.3 Applying the MVC design pattern to a Web API9.4 Attribute routing: Linking action methods to URLs9.4.1 Combining route attributes to keep your route templates DRY9.4.2 Using token replacement to reduce duplication in attribute routing9.4.3 Handling HTTP verbs with attribute routing9.5 Using common conventions with the [ApiController] attribute9.6 Generating a response from a model9.6.1 Customizing the default formatters: Adding XML support9.6.2 Choosing a response format with content negotiationSummary
Part 2. Building complete applications
10 Service configuration with dependency injection
10.1 Introduction to dependency injection10.1.1 Understanding the benefits of dependency injection10.1.2 Creating loosely coupled code10.1.3 Dependency injection in ASP.NET Core10.2 Using the dependency injection container10.2.1 Adding ASP.NET Core framework services to the container10.2.2 Registering your own services with the container10.2.3 Registering services using objects and lambdas10.2.4 Registering a service in the container multiple times10.2.5 Injecting services into action methods, page handlers, and views10.3 Understanding lifetimes: When are services created?10.3.1 Transient: Everyone is unique10.3.2 Scoped: Let’s stick together10.3.3 Singleton: There can be only one10.3.4 Keeping an eye out for captured dependenciesSummary
11 Configuring an ASP.NET Core application
11.1 Introducing the ASP.NET Core configuration model11.2 Configuring your application with CreateDefaultBuilder11.3 Building a configuration object for your app11.3.1 Adding a configuration provider in Program.cs11.3.2 Using multiple providers to override configuration values11.3.3 Storing configuration secrets safely11.3.4 Reloading configuration values when they change11.4 Using strongly typed settings with the options pattern11.4.1 Introducing the IOptions interface11.4.2 Reloading strongly typed options with IOptionsSnapshot11.4.3 Designing your options classes for automatic binding11.4.4 Binding strongly typed settings without the IOptions interface11.5 Configuring an application for multiple environments11.5.1 Identifying the hosting environment11.5.2 Loading environment-specific configuration files11.5.3 Setting the hosting environmentSummary
12 Saving data with Entity Framework Core
12.1 Introducing Entity Framework Core12.1.1 What is EF Core?12.1.2 Why use an object-relational mapper?12.1.3 When should you choose EF Core?12.1.4 Mapping a database to your application code12.2 Adding EF Core to an application12.2.1 Choosing a database provider and installing EF Core12.2.2 Building a data model12.2.3 Registering a data context12.3 Managing changes with migrations12.3.1 Creating your first migration12.3.2 Adding a second migration12.4 Querying data from and saving data to the database12.4.1 Creating a record12.4.2 Loading a list of records12.4.3 Loading a single record12.4.4 Updating a model with changes12.5 Using EF Core in production applicationsSummary
13 The MVC and Razor Pages filter pipeline
13.1 Understanding filters and when to use them13.1.1 The MVC filter pipeline13.1.2 The Razor Pages filter pipeline13.1.3 Filters or middleware: Which should you choose?13.1.4 Creating a simple filter13.1.5 Adding filters to your actions, controllers, Razor Pages, and globally13.1.6 Understanding the order of filter execution13.2 Creating custom filters for your application13.2.1 Authorization filters: Protecting your APIs13.2.2 Resource filters: Short-circuiting your action methods13.2.3 Action filters: Customizing model binding and action results13.2.4 Exception filters: Custom exception handling for your action methods13.2.5 Result filters: Customizing action results before they execute13.2.6 Page filters: Customizing model binding for Razor Pages13.3 Understanding pipeline short-circuiting13.4 Using dependency injection with filter attributesSummary
14 Authentication: Adding users to your application with Identity
14.1 Introducing authentication and authorization14.1.1 Understanding users and claims in ASP.NET Core14.1.2 Authentication in ASP.NET Core: Services and middleware14.1.3 Authentication for APIs and distributed applications14.2 What is ASP.NET Core Identity?14.3 Creating a project that uses ASP.NET Core Identity14.3.1 Creating the project from a template14.3.2 Exploring the template in Solution Explorer14.3.3 The ASP.NET Core Identity data model14.3.4 Interacting with ASP.NET Core Identity14.4 Adding ASP.NET Core Identity to an existing project14.4.1 Configuring the ASP.NET Core Identity services and middleware14.4.2 Updating the EF Core data model to support Identity14.4.3 Updating the Razor views to link to the Identity UI14.5 Customizing a page in ASP.NET Core Identity’s default UI14.6 Managing users: Adding custom data to usersSummary
15 Authorization: Securing your application
15.1 Introduction to authorization15.2 Authorization in ASP.NET Core15.2.1 Preventing anonymous users from accessing your application15.2.2 Handling unauthorized requests15.3 Using policies for claims-based authorization15.4 Creating custom policies for authorization15.4.1 Requirements and handlers: The building blocks of a policy15.4.2 Creating a policy with a custom requirement and handler15.5 Controlling access with resource-based authorization15.5.1 Manually authorizing requests with IAuthorizationService15.5.2 Creating a resource-based AuthorizationHandler15.6 Hiding elements in Razor templates from unauthorized usersSummary
16 Publishing and deploying your application
16.1 Understanding the ASP.NET Core hosting model16.1.1 Running vs. publishing an ASP.NET Core app16.1.2 Choosing a deployment method for your application16.2 Publishing your app to IIS16.2.1 Configuring IIS for ASP.NET Core16.2.2 Preparing and publishing your application to IIS16.3 Hosting an application on Linux16.3.1 Running an ASP.NET Core app behind a reverse proxy on Linux16.3.2 Preparing your app for deployment to Linux16.4 Configuring the URLs for your application16.5 Optimizing your client-side assets using BundlerMinifier16.5.1 Speeding up an app using bundling and minification16.5.2 Adding BundlerMinifier to your application16.5.3 Using minified files in production with the Environment Tag Helper16.5.4 Serving common files from a CDNSummary
Part 3. Extending your applications
17 Monitoring and troubleshooting errors with logging
17.1 Using logging effectively in a production app17.1.1 Highlighting problems using custom log messages17.1.2 The ASP.NET Core logging abstractions17.2 Adding log messages to your application17.2.1 Log level: How important is the log message?17.2.2 Log category: Which component created the log17.2.3 Formatting messages and capturing parameter values17.3 Controlling where logs are written using logging providers17.3.1 Adding a new logging provider to your application17.3.2 Replacing the default ILoggerFactory with Serilog17.4 Changing log verbosity with filtering17.5 Structured logging: Creating searchable, useful logs17.5.1 Adding a structured logging provider to your app17.5.2 Using scopes to add additional properties to your logsSummary
18 Improving your application’s security
18.1 Adding HTTPS to an application18.1.1 Using the ASP.NET Core HTTPS development certificates18.1.2 Configuring Kestrel with a production HTTPS certificate18.1.3 Enforcing HTTPS for your whole app18.2 Defending against cross-site scripting (XSS) attacks18.3 Protecting from cross-site request forgery (CSRF) attacks18.4 Calling your web APIs from other domains using CORS18.4.1 Understanding CORS and how it works18.4.2 Adding a global CORS policy to your whole app18.4.3 Adding CORS to specific Web API actions with EnableCorsAttribute18.4.4 Configuring CORS policies18.5 Exploring other attack vectors18.5.1 Detecting and avoiding open redirect attacks18.5.2 Avoiding SQL injection attacks with EF Core and parameterization18.5.3 Preventing insecure direct object references18.5.4 Protecting your users’ passwords and dataSummary
19 Building custom components
19.1 Customizing your middleware pipeline19.1.1 Creating simple endpoints with the Run extension19.1.2 Branching middleware pipelines with the Map extension19.1.3 Adding to the pipeline with the Use extension19.1.4 Building a custom middleware component19.2 Creating custom endpoints with endpoint routing19.2.1 Creating a custom endpoint routing component19.2.2 Creating simple endpoints with MapGet and WriteJsonAsync19.2.3 Applying authorization to endpoints19.3 Handling complex configuration requirements19.3.1 Partially building configuration to configure additional providers19.3.2 Using services to configure IOptions with IConfigureOptions19.4 Using a third-party dependency injection containerSummary
20 Building custom MVC and Razor Pages components
20.1 Creating a custom Razor Tag Helper20.1.1 Printing environment information with a custom Tag Helper20.1.2 Creating a custom Tag Helper to conditionally hide elements20.1.3 Creating a Tag Helper to convert Markdown to HTML20.2 View components: Adding logic to partial views20.3 Building a custom validation attribute20.4 Replacing the validation framework with FluentValidation20.4.1 Comparing FluentValidation to DataAnnotations attributes20.4.2 Adding FluentValidation to your applicationSummary
21 Calling remote APIs with IHttpClientFactory
21.1 Calling HTTP APIs: The problem with HttpClient21.2 Creating HttpClients with IHttpClientFactory21.2.1 Using IHttpClientFactory to manage HttpClientHandler lifetime21.2.2 Configuring named clients at registration time21.2.3 Using typed clients to encapsulate HTTP calls21.3 Handling transient HTTP errors with Polly21.4 Creating a custom HttpMessageHandlerSummary
22 Building background tasks and services
22.1 Running background tasks with IHostedService22.1.1 Running background tasks on a timer22.1.2 Using scoped services in background tasks22.2 Creating headless worker services using IHost22.2.1 Creating a worker service from a template22.2.2 Running worker services in production22.3 Coordinating background tasks using Quartz.NET22.3.1 Installing Quartz.NET in an ASP.NET Core application22.3.2 Configuring a job to run on a schedule with Quartz.NET22.3.3 Using clustering to add redundancy to your background tasksSummary
23 Testing your application
23.1 An introduction to testing in ASP.NET Core23.2 Unit testing with xUnit23.2.1 Creating your first test project23.2.2 Running tests with dotnet test23.2.3 Referencing your app from your test project23.2.4 Adding Fact and Theory unit tests23.2.5 Testing failure conditions23.3 Unit testing custom middleware23.4 Unit testing API controllers23.5 Integration testing: Testing your whole app in-memory23.5.1 Creating a TestServer using the Test Host package23.5.2 Testing your application with WebApplicationFactory23.5.3 Replacing dependencies in WebApplicationFactory23.5.4 Reducing duplication by creating a custom WebApplicationFactory23.6 Isolating the database with an in-memory EF Core providerSummary
appendix A. Preparing your development environment
A.1 Installing the .NET SDKA.2 Choosing an IDE or editorA.2.1 Visual Studio (Windows)A.2.2 JetBrains Rider (Windows, Linux, macOS)A.2.3 Visual Studio for Mac (macOS)A.2.4 Visual Studio Code (Windows, Linux, macOS)
appendix B. Understanding the .NET ecosystem
B.1 The evolution of .NET into .NET 5.0B.1.1 Exploring the .NET platforms that prompted .NET CoreB.1.2 Introducing .NET CoreB.1.3 .NET 5.0: The first step in the One .NET visionB.1.4 The future: .NET 6.0 and beyondB.2 Sharing code between projectsB.2.1 Finding a common intersection with Portable Class LibrariesB.2.2 .NET Standard: A common interface for .NETB.2.3 Fudging .NET Standard 2.0 support with the compatibility shimB.3 .NET 5.0 and the future of .NET StandardSummary
appendix C. Useful references
C.1 Relevant booksC.2 Announcement blog postsC.3 Microsoft documentationC.4 Security-related linksC.5 ASP.NET Core GitHub repositoriesC.6 Tooling and servicesC.7 ASP.NET Core blogsC.8 Video links
index

Content preview from ASP.NET Core in Action, Second Edition

12 Saving data with Entity Framework Core

This chapter includes

What Entity Framework Core is and why you should use it
Adding Entity Framework Core to an ASP.NET Core application
Building a data model and using it to create a database
Querying, creating, and updating data using Entity Framework Core

Most applications that you’ll build with ASP.NET Core will require storing and loading some kind of data. Even the examples so far in this book have assumed you have some sort of data store—storing exchange rates, user shopping carts, or the locations of physical stores. I’ve glossed over this for the most part, but typically you’ll store this data in a database.

Working with databases can often be a rather cumbersome process. You have to manage ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781617298301Publisher Support Publisher Website Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

ASP.NET Core in Action, Second Edition

by Andrew Lock

12 Saving data with Entity Framework Core

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.