book

ASP.NET Core Razor Pages in Action

Name: ASP.NET Core Razor Pages in Action
Author: Mike Brind
ISBN: 9781617299988

by Mike Brind

December 2022

Intermediate to advanced

456 pages

14h 8m

English

Manning Publications

Audiobook available

Read now

Unlock full access

inside front cover
ASP.NET Core Razor Pages in Action
Copyright
contents
front matter
prefaceacknowledgmentsabout this bookWho should read this bookHow this book is organizedAbout the codeliveBook discussion forumabout the authorabout the cover illustration
1 Getting started with Razor Pages
1.1 What is Razor Pages?1.1.1 Web development frameworks1.1.2 Server-side frameworks1.1.3 Cross-platform functionality1.1.4 Open source1.1.5 Using your existing knowledge1.2 What can you do with Razor Pages?1.3 The technologies that underpin Razor Pages1.3.1 The ASP.NET Core MVC framework1.3.2 Model-view-controller1.3.3 The design goals of Razor Pages1.4 When should you use Razor Pages?1.5 Working with Razor Pages1.5.1 How do you get Razor Pages?1.5.2 Choosing a development environment1.5.3 Choosing a database systemSummary
2 Building your first application
2.1 Creating your first website2.1.1 Creating a website using Visual Studio2.1.2 Creating a website using the command-line interface2.1.3 Running the application2.1.4 Adding a new page2.1.5 Modifying to include dynamic content2.1.6 Adding the page to the navigation2.2 Exploring the project files2.2.1 The WebApplication1.sln file2.2.2 The WebApplication1.csproj file2.2.3 The bin and obj folders2.2.4 The Properties folder2.2.5 The wwwroot folder2.2.6 The Pages folder2.2.7 The app-settings files2.2.8 Program.cs2.3 Understanding middleware2.3.1 An HTTP refresher2.3.2 The HttpContext2.3.3 The application request pipeline2.3.4 Creating middleware2.3.5 Middleware classesSummary
3 Working with Razor Pages
3.1 Working with Razor syntax3.1.1 Directives and code blocks3.1.2 Rendering HTML with expressions3.1.3 Control blocks in Razor3.1.4 Rendering literal strings3.1.5 Rendering literal HTML3.2 Layout pages3.2.1 Assigning the Layout property3.2.2 Injecting optional content with sections3.3 Reusable HTML with partial views, tag helpers, and view components3.3.1 Partial views3.3.2 Tag helpers3.3.3 View components3.4 The PageModel3.4.1 Passing data to pages3.4.2 The PageModel as a view model3.4.3 The PageModel as a controllerSummary
4 Matching URLs to Razor Pages with routing
4.1 Routing basics4.1.1 Route templates4.2 Customizing route templates4.2.1 Overriding routes4.2.2 Route parameters4.2.3 Binding route data to handler parameters4.2.4 Catchall parameters4.2.5 Route constraints4.2.6 Creating additional routes4.2.7 Working with PageRouteModel conventions directly4.3 Generating URLs4.3.1 The anchor tag helper4.3.2 Using the IUrlHelper to generate URLs4.3.3 Generating redirect URLs from ActionResults4.3.4 Customizing URL generation4.3.5 Using parameter transformers to customize route and parameter value generationSummary
5 Working with forms: Model binding
5.1 Forms basics5.1.1 Using the post-redirect-get pattern5.1.2 Accessing values from Request.Form5.1.3 Accessing values from Request.Query5.2 Model binding5.2.1 Using model binding with handler parameters5.2.2 Using model binding with public properties5.2.3 Binding complex objects5.2.4 Binding simple collections5.2.5 Binding complex collections5.3 Validating user input in Razor Pages5.3.1 DataAnnotation attributes5.3.2 Client-side validation5.3.3 Server-side validation5.3.4 Managing more complex validation with ModelState5.3.5 Custom validation attributesSummary

6 Working with forms: Tag helpers
6.1 The form and form action tag helpers6.2 Input and label tag helpers6.2.1 Understanding the input types6.2.2 Using data annotation attributes to control presentation6.2.3 Formatting the rendered date or time value6.2.4 Using the DisplayAttribute to control labels6.3 The select tag helper6.3.1 Creating options6.3.2 Binding multiple values6.3.3 Working with OptGroups6.3.4 Binding enumerations6.4 Check boxes and radio controls6.5 Uploading filesSummary
7 Using dependency injection to manage services
7.1 The reason for dependency injection7.1.1 Single-responsibility principle7.1.2 Loose coupling7.1.3 Dependency inversion7.1.4 Dependency injection7.2 Inversion of control containers7.2.1 Service registration7.2.2 Service lifetimes7.2.3 Captive dependencies7.2.4 Other service registration options7.2.5 Registering multiple implementations7.3 Other ways to access registered services7.3.1 View injection7.3.2 Method injection7.3.3 Directly from the service container with GetService and GetRequiredServiceSummary
8 Working with data
8.1 What is Entity Framework Core?8.1.1 Why choose EF Core?8.1.2 How does EF Core work?8.1.3 Managing relationships8.1.4 Installing Entity Framework Core8.1.5 Create the context8.1.6 Adding DbSets8.1.7 Configuring the model8.2 Migrations8.2.1 Seed data8.2.2 Adding migration tools8.2.3 Creating and applying a migration8.3 Querying data8.3.1 Retrieving multiple records8.3.2 Selecting single records8.4 Scaffolding CRUD pages8.4.1 Visual Studio scaffold instructions8.4.2 Scaffolding from the command line8.4.3 Working with the scaffolded pages8.5 Creating, modifying, and deleting data8.5.1 Modifying data8.5.2 Deleting dataSummary
9 Managing users with authentication
9.1 Authentication basics9.1.1 How authentication works9.1.2 Adding simple authentication9.2 ASP.NET Core Identity9.2.1 Creating a user9.2.2 Configuring the DbContext9.2.3 Adding migration9.3 Customizing Identity9.3.1 Customizing Identity options9.3.2 Customizing the user9.3.3 Scaffolding and customizing the UI9.3.4 Enabling email confirmation9.3.5 Disabling UI featuresSummary
10 Controlling access with authorization
10.1 Basic authorization in Razor Pages10.1.1 Applying simple authorization10.1.2 Allowing anonymous access10.2 Working with roles10.2.1 Viewing roles10.2.2 Adding roles10.2.3 Assigning roles to users10.2.4 Using policies to apply role checks10.3 Claims-based authorization10.3.1 Adding claims to users10.3.2 Using policies to enforce claims-based authorization10.3.3 Using assertions for more complex requirements10.3.4 Custom authorization requirements and handlers10.3.5 Roles or claims?10.4 Authorizing resources10.4.1 Creating a requirement and a handler10.4.2 Applying authorization to the UISummary
11 Client-side technologies and AJAX
11.1 Choosing your client-side technology11.2 Calling page handlers from JavaScript11.2.1 Using a partial page to return HTML11.2.2 Posting to a page handler11.2.3 Working with JsonResult11.3 Minimal request-handling APIs11.3.1 An example minimal API11.3.2 Parameters in minimal APIs11.3.3 Minimal API return types11.4 CSS Isolation in Razor PagesSummary
12 Troubleshooting your application
12.1 Exception management12.1.1 The Developer Exception page12.1.2 ExceptionHandlerMiddleware12.2 StatusCodePages12.2.1 Exploring WithRedirects12.2.2 StatusCodePages WithReExecute12.3 Logging12.3.1 Logging basics12.3.2 Log levels12.3.3 Log categories12.3.4 Using EventIds12.3.5 Formatting the log message12.3.6 Applying log filter rules12.3.7 Custom email logger12.3.8 Structured logging with SerilogSummary
13 Protecting your application against external attacks
13.1 HTTPS13.1.1 SSL/TLS certificates13.1.2 Using HTTPS in development13.1.3 Including HSTS in production13.2 Broken access control13.2.1 Incorrect security policies13.2.2 Cross-site request forgery13.3 Cryptographic failures13.3.1 Plain-text passwords13.3.2 Using the PasswordHasher without Identity UI13.4 Injection attacks13.4.1 SQL injection13.4.2 Cross-site scriptingSummary
14 Configuring and publishing your application
14.1 Working with environments14.1.1 Understanding and managing environments14.1.2 Setting the environment14.1.3 Registering services conditionally for each environment14.1.4 The IHostEnvironment service14.1.5 The environment tag helper14.2 Application configuration14.2.1 appSettings.json14.2.2 Accessing configuration settings programmatically by key14.2.3 Strongly typed app settings14.2.4 Using the options pattern14.2.5 Binding directly to POCOs14.2.6 Environments14.3 Improving performance with caching14.3.1 The cache tag helper14.3.2 In-memory caching with IMemoryCache14.4 Publishing your application14.4.1 Self-contained and framework-dependent14.4.2 Publishing using the CLI14.4.3 Publishing using Visual StudioSummary
index

Content preview from ASP.NET Core Razor Pages in Action

13 Protecting your application against external attacks

This chapter covers

Configuring your application for HTTPS
Ensuring you apply good access control
Avoiding common cryptographic failures
Preventing injection attacks

Once your application is published, it will come under attack. Most of these attacks will be automated, probing for well-known vulnerabilities. You will probably be surprised to see requests being logged for URLs that include phpmyadmin, or the names of popular third-party component libraries you don’t even use. The HTTPS protocol underpins the security of any website. We will begin this chapter with a reminder of the importance of HTTPS and learning how to configure your application to use HTTPS.

Then we will look at the ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Pro ASP.NET Core 3: Develop Cloud-Ready Web Applications Using MVC, Blazor, and Razor Pages

Adam Freeman

Beginning gRPC with ASP.NET Core 6: Build Applications using ASP.NET Core Razor Pages, Angular, and Best Practices in .NET 6

Anthony Giretti

Pro ASP.NET Core 6: Develop Cloud-Ready Web Applications Using MVC, Blazor, and Razor Pages

Adam Freeman

ASP.NET Core in Action, Second Edition, video edition

Andrew Lock

Publisher Resources

ISBN: 9781617299988Publisher Support Publisher Website Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

ASP.NET Core Razor Pages in Action

by Mike Brind

13 Protecting your application against external attacks

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.