book

Pro ASP.NET MVC 3 Framework, Third Edition

Name: Pro ASP.NET MVC 3 Framework, Third Edition
ISBN: 9781430234043

by Adam Freeman, Steven Sanderson

July 2011

Intermediate to advanced

850 pages

18h 24m

English

Apress

Read now

Unlock full access

Copyright
About the Authors
About the Technical Reviewer
Acknowledgments
I. Introducing ASP.NET MVC 3
1. What's the Big Idea?
1.1. A Brief History of Web Development1.1.1. Traditional ASP.NET Web Forms1.1.2. What's Wrong with ASP.NET Web Forms?1.2. Web Development Today1.2.1. Web Standards and REST1.2.2. Agile and Test-Driven Development1.2.3. Ruby on Rails1.2.4. Sinatra1.2.5. Node.js1.3. Key Benefits of ASP.NET MVC1.3.1. MVC Architecture1.3.2. Extensibility1.3.3. Tight Control over HTML and HTTP1.3.4. Testability1.3.5. Powerful Routing System1.3.6. Built on the Best Parts of the ASP.NET Platform1.3.7. Modern API1.3.8. ASP.NET MVC Is Open Source1.4. Who Should Use ASP.NET MVC?1.4.1. Comparisons with ASP.NET Web Forms1.4.2. Migrating from Web Forms to MVC1.4.3. Comparisons with Ruby on Rails1.4.4. Comparisons with MonoRail1.5. What's New in ASP.NET MVC 31.6. Summary
2. Getting Ready
2.1. Preparing the Workstation2.1.1. Installing Visual Studio 20102.1.2. Installing the Essential Software2.1.3. Installing Optional Components2.1.3.1. MVC Framework Source Code2.1.3.2. IIS Express2.1.3.3. SQL Server 2008 R2 Management Studio Express2.2. Preparing the Server2.2.1. Enabling the Web Server Role2.2.2. Installing Additional Components2.2.3. Setting up Web Deployment2.3. Getting Further Information2.4. Summary
3. Your First MVC Application
3.1. Creating a New ASP.NET MVC Project3.1.1. Adding the First Controller3.1.2. Understanding Routes3.2. Rendering Web Pages3.2.1. Creating and Rendering a View3.2.2. Adding Dynamic Output3.3. Creating a Simple Data-Entry Application3.3.1. Setting the Scene3.3.2. Designing a Data Model3.3.2.1. Adding a Model Class3.3.3. Linking Action Methods3.3.3.1. Creating the Action Method3.3.3.2. Adding a Strongly Typed View3.3.4. Building the Form3.3.5. Handling Forms3.3.5.1. Using Model Binding3.3.5.2. Rendering Other Views3.3.6. Adding Validation3.3.6.1. Highlighting Invalid Fields3.3.7. Completing the Example3.4. Summary
4. The MVC Pattern
4.1. The History of MVC4.2. Understanding the MVC Pattern4.2.1. Understanding the Domain Model4.2.2. The ASP.NET Implementation of MVC4.2.3. Comparing MVC to Other Patterns4.2.4. Understanding the Smart UI Pattern4.2.4.1. Understanding the Model-View Architecture4.2.4.2. Understanding Classic Three-Tier Architectures4.2.4.3. Understanding Variations on MVC4.2.4.3.1. Understanding the Model-View-Presenter Pattern4.2.4.3.2. Understanding the Model-View-View Model Pattern4.3. Applying Domain-Driven Development4.3.1. Modeling an Example Domain4.3.2. Ubiquitous Language4.3.3. Aggregates and Simplification4.3.4. Defining Repositories4.4. Building Loosely Coupled Components4.4.1. Using Dependency Injection4.4.2. An MVC-Specific Dependency Injection Example4.4.3. Using a Dependency Injection Container4.5. Getting Started with Automated Testing4.5.1. Understanding Unit Testing4.5.1.1. Using Test-Driven Development and the Red-Green-Refactor Workflow4.5.2. Understanding Integration Testing4.6. Summary
5. Essential Language Features
5.1. Essential C# Features5.1.1. Using Automatically Implemented Properties5.1.2. Using Object and Collection Initializers5.1.3. Using Extension Methods5.1.3.1. Applying Extension Methods to an Interface5.1.3.2. Creating Filtering Extension Methods5.1.4. Using Lambda Expressions5.1.5. Using Automatic Type Inference5.1.6. Using Anonymous Types5.1.7. Performing Language Integrated Queries5.1.7.1. Understanding Deferred LINQ Queries5.1.7.2. Repeatedly Using a Deferred Query5.2. Understanding Razor Syntax5.2.1. Creating the Project5.2.1.1. Defining the Model5.2.1.2. Defining the Controller5.2.1.3. Creating the View5.2.1.4. Setting the Default Route5.2.2. Examining a Basic Razor View5.2.2.1. Working with the Model Object5.2.2.2. Defining Razor Code5.2.2.3. Including Multiple Functions in a Code Block5.2.2.4. Passing Data Using the View Bag Feature5.2.2.5. Working with Layouts5.2.2.6. Working Without Layouts5.3. Summary

6. Essential Tools for MVC
6.1. Using Ninject6.1.1. Creating the Project6.1.1.1. Adding Ninject6.1.2. Getting Started with Ninject6.1.3. Creating Chains of Dependency6.1.4. Specifying Property and Parameter Values6.1.5. Using Self-Binding6.1.6. Binding to a Derived Type6.1.7. Using Conditional Binding6.2. Applying Ninject to ASP.NET MVC6.3. Unit Testing with Visual Studio6.3.1. Creating the Project6.3.2. Creating Unit Tests6.3.3. Running the Unit Tests (and Failing)6.3.4. Implementing the Feature6.4. Using Moq6.4.1. Adding Moq to the Visual Studio Project6.4.2. Creating a Mock with Moq6.4.2.1. Using the Moq Method Selector6.4.2.2. Using Moq Parameter Filters6.4.2.3. Returning a Result6.4.3. Unit Testing with Moq6.4.4. Verifying with Moq6.5. Summary
7. SportsStore: A Real Application
7.1. Getting Started7.1.1. Creating the Visual Studio Solution and Projects7.1.2. Adding References7.1.3. Setting Up the DI Container7.1.4. Starting the Application7.2. Starting the Domain Model7.2.1. Creating an Abstract Repository7.2.2. Making a Mock Repository7.3. Displaying a List of Products7.3.1. Adding a Controller7.3.2. Adding the View7.3.3. Setting the Default Route7.3.4. Running the Application7.4. Preparing a Database7.4.1. Creating the Database7.4.2. Defining the Database Schema7.4.3. Adding Data to the Database7.4.4. Creating the Entity Framework Context7.4.5. Creating the Product Repository7.5. Adding Pagination7.5.1. Displaying Page Links7.5.1.1. Adding the View Model7.5.1.2. Adding the HTML Helper Method7.5.1.3. Adding the View Model Data7.5.1.4. Displaying the Page Links7.5.2. Improving the URLs7.6. Styling the Content7.6.1. Defining Common Content in the Layout7.6.2. Adding CSS Rules7.6.3. Creating a Partial View7.7. Summary
8. SportsStore: Navigation and Cart
8.1. Adding Navigation Controls8.1.1. Filtering the Product List8.1.2. Refining the URL Scheme8.1.3. Building a Category Navigation Menu8.1.3.1. Creating the Navigation Controller8.1.3.2. Generating Category Lists8.1.3.3. Creating the Partial View8.1.3.4. Highlighting the Current Category8.1.4. Correcting the Page Count8.2. Building the Shopping Cart8.2.1. Defining the Cart Entity8.2.2. Adding the Add to Cart Buttons8.2.3. Implementing the Cart Controller8.2.4. Displaying the Contents of the Cart8.3. Using Model Binding8.3.1. Creating a Custom Model Binder8.4. Completing the Cart8.4.1. Removing Items from the Cart8.4.2. Adding the Cart Summary8.5. Submitting Orders8.5.1. Extending the Domain Model8.5.2. Adding the Checkout Process8.5.3. Implementing the Order Processor8.5.3.1. Defining the Interface8.5.3.2. Implementing the Interface8.5.4. Registering the Implementation8.5.5. Completing the Cart Controller8.5.6. Displaying Validation Errors8.5.7. Displaying a Summary Page8.6. Summary
9. SportsStore: Administration
9.1. Adding Catalog Management9.1.1. Creating a CRUD Controller9.1.2. Rendering a Grid of Products in the Repository9.1.3. Creating a New Layout9.1.4. Implementing the List View9.1.5. Editing Products9.1.5.1. Creating the Edit Action Method9.1.5.2. Creating the Edit View9.1.5.3. Updating the Product Repository9.1.5.4. Handling Edit POST Requests9.1.5.5. Displaying a Confirmation Message9.1.5.6. Adding Model Validation9.1.5.7. Enabling Client-Side Validation9.1.6. Creating New Products9.1.7. Deleting Products9.2. Securing the Administration Features9.2.1. Setting Up Forms Authentication9.2.2. Applying Authorization with Filters9.2.3. Creating the Authentication Provider9.2.4. Creating the Account Controller9.2.5. Creating the View9.3. Image Uploads9.3.1. Extending the Database9.3.2. Enhancing the Domain Model9.3.3. Updating the Entity Framework Conceptual Model9.3.4. Creating the Upload User Interface Elements9.3.5. Saving Images to the Database9.3.6. Implementing the GetImage Action Method9.3.7. Displaying Product Images9.4. Summary
II. ASP.NET MVC 3 in Detail
10. Overview of MVC Projects
10.1. Working with Visual Studio MVC Projects10.1.1. Using the Internet and Intranet Application Controllers10.1.2. Understanding MVC Conventions10.1.2.1. Following Conventions for Controller Classes10.1.2.2. Following Conventions for Views10.1.2.3. Following Conventions for Layouts10.2. Debugging MVC Applications10.2.1. Creating the Project10.2.2. Launching the Visual Studio Debugger10.2.3. Causing the Visual Studio Debugger to Break10.2.3.1. Using Breakpoints10.2.3.2. Breaking on Exceptions10.2.4. Using Edit and Continue10.2.4.1. Enabling Edit and Continue10.2.4.2. Modifying the Project10.2.4.3. Editing and Continuing10.3. Project-Wide Dependency Injection10.4. Summary
11. URLs, Routing, and Areas
11.1. Introducing the Routing System11.1.1. Creating the Routing Project11.1.2. Introducing URL Patterns11.1.3. Creating and Registering a Simple Route11.1.4. Defining Default Values11.1.5. Using Static URL Segments11.1.6. Defining Custom Segment Variables11.1.6.1. Using Custom Variables as Action Method Parameters11.1.7. Defining Optional URL Segments11.1.8. Defining Variable-Length Routes11.1.9. Prioritizing Controllers by Namespaces11.1.10. Constraining Routes11.1.10.1. Constraining a Route Using a Regular Expression11.1.10.2. Constraining a Route to a Set of Specific Values11.1.10.3. Constraining a Route Using HTTP Methods11.1.10.4. Defining a Custom Constraint11.1.11. Routing Requests for Disk Files11.1.12. Bypassing the Routing System11.2. Generating Outgoing URLs11.2.1. Preparing the Project11.2.2. Generating Outgoing URLs in Views11.2.2.1. Targeting Other Controllers11.2.2.2. Passing Extra Values11.2.2.3. Specifying HTML Attributes11.2.2.4. Generating Fully Qualified URLs in Links11.2.2.5. Generating URLs (and Not Links)11.2.2.6. Generating Links and URLs from Routing Data11.2.3. Generating Outgoing URLs in Action Methods11.2.4. Generating a URL from a Specific Route11.3. Customizing the Routing System11.3.1. Creating a Custom RouteBase Implementation11.3.1.1. Routing Incoming URLs11.3.1.2. Generating Outgoing URLs11.3.2. Creating a Custom Route Handler11.4. Working with Areas11.4.1. Creating an Area11.4.2. Populating an Area11.4.3. Resolving the Ambiguous Controller Issue11.4.4. Generating Links to Actions in Areas11.5. URL Schema Best Practices11.5.1. Make Your URLs Clean and Human-Friendly11.5.2. GET and POST: Pick the Right One11.6. Summary
12. Controllers and Actions
12.1. Introducing the Controller12.1.1. Preparing the Project12.1.2. Creating a Controller with IController12.1.3. Creating a Controller by Deriving from the Controller Class12.2. Receiving Input12.2.1. Getting Data from Context Objects12.2.2. Using Action Method Parameters12.2.2.1. Understanding How Parameters Objects Are Instantiated12.2.2.2. Understanding Optional and Compulsory Parameters12.2.2.3. Specifying Default Parameter Values12.3. Producing Output12.3.1. Understanding Action Results12.3.2. Returning HTML by Rendering a View12.3.3. Passing Data from an Action Method to a View12.3.3.1. Providing a View Model Object12.3.3.2. Passing Data with the ViewBag12.3.3.3. Passing Data with View Data12.3.4. Performing Redirections12.3.4.1. Redirecting to a Literal URL12.3.4.2. Redirecting to a Routing System URL12.3.4.3. Redirecting to an Action Method12.3.5. Returning Text Data12.3.6. Returning XML Data12.3.7. Returning JSON Data12.3.8. Returning Files and Binary Data12.3.8.1. Sending a File12.3.8.2. Sending a Byte Array12.3.8.3. Sending the Contents of a Stream12.3.9. Returning Errors and HTTP Codes12.3.9.1. Sending a Specific HTTP Result Code12.3.9.2. Sending a 404 Result12.3.9.3. Sending a 401 Result12.3.10. Creating a Custom Action Result12.4. Summary
13. Filters
13.1. Using Filters13.1.1. Introducing the Four Basic Types of Filters13.1.2. Applying Filters to Controllers and Action Methods13.1.3. Using Authorization Filters13.1.3.1. Creating an Authentication Filter13.1.3.2. Using the Built-in Authorization Filter13.1.3.2.1. Implementing a Custom Authorization Policy13.1.3.2.2. Implementing a Custom Authorization Failure Policy13.1.4. Using Exception Filters13.1.4.1. Creating an Exception Filter13.1.4.2. Using the Built-In Exception Filter13.1.5. Using Action and Result Filters13.1.5.1. Implementing the OnActionExecuting Method13.1.5.2. Implementing the OnActionExecuted Method13.1.5.3. Implementing a Result Filter13.1.5.4. Using the Built-In Action and Result Filter Class13.1.6. Using Other Filter Features13.1.6.1. Filtering Without Attributes13.1.6.2. Using Global Filters13.1.6.3. Ordering Filter Execution13.1.7. Using the Built-in Filters13.1.7.1. Using the RequireHttps Filter13.1.7.2. Using the OutputCache Filter13.2. Summary
14. Controller Extensibility
14.1. Request Processing Pipeline Components14.2. Creating a Controller Factory14.2.1. Defining a Custom Controller Factory14.2.2. Registering a Custom Controller Factory14.3. Working with the Built-In Controller Factory14.3.1. Prioritizing Namespaces14.3.2. Customizing DefaultControllerFactory Controller Creation14.3.2.1. Using the Dependency Resolver14.3.2.2. Using a Controller Activator14.3.2.3. Overriding DefaultControllerFactory Methods14.4. Creating a Custom Action Invoker14.5. Using the Built-In Action Invoker14.5.1. Using a Custom Action Name14.5.2. Using Action Method Selection14.5.2.1. Creating a Custom Action Method Selector14.5.2.2. Handling Unknown Actions14.5.3. Using Action Method Selectors to Support REST Services14.5.3.1. Overriding HTTP Methods14.5.3.2. Overriding HTTP Methods in an MVC HTML Form14.6. Improving Performance with Specialized Controllers14.6.1. Using Sessionless Controllers14.6.1.1. Managing Session State in a Custom IControllerFactory14.6.1.2. Managing Session State Using DefaultControllerFactory14.6.2. Using Asynchronous Controllers14.6.2.1. Creating an Asynchronous Controller14.6.2.1.1. Creating the Async and Completed Methods14.6.2.1.2. Starting Asynchronous Tasks14.6.2.1.3. Finishing Asynchronous Tasks14.6.2.1.4. Passing Parameters from the Async to the Completed Method14.6.2.1.5. Managing Timeouts14.6.2.1.6. Aborting Asynchronous Operations14.6.2.2. Using the .NET Asynchronous Programming Pattern14.6.2.3. Deciding When to Use Asynchronous Controllers14.7. Summary
15. Views
15.1. Creating a Custom View Engine15.1.1. Creating a Custom IView15.1.2. Creating an IViewEngine Implementation15.1.3. Registering a Custom View Engine15.2. Working with the Razor Engine15.2.1. Understanding Razor View Rendering15.2.2. Adding Dependency Injection to Razor Views15.2.3. Configuring the View Search Locations15.3. Adding Dynamic Content to a Razor View15.3.1. Using Inline Code15.3.1.1. Importing Namespaces into a View15.3.1.1.1. Adding a @using Tag to a View15.3.1.1.2. Adding a Namespace to Web.config15.3.1.2. Understanding Razor HTML String Encoding15.3.1.3. Using Dynamically Typed Views15.4. Using HTML Helpers15.4.1. Creating an Inline HTML Helper15.4.2. Creating an External Helper Method15.4.3. Using the Built-in HTML Helpers15.4.3.1. Creating Forms15.4.3.2. Using Input Helpers15.4.3.3. Using Strongly Typed Input Helpers15.4.3.4. Creating Select Elements15.4.3.5. Creating Links and URLs15.4.3.6. Using the WebGrid Helper15.4.3.7. Using the Chart Helper15.4.3.8. Using Other Built-In Helpers15.5. Using Sections15.5.1. Testing For Sections15.5.2. Rendering Optional Sections15.6. Using Partial Views15.6.1. Creating a Partial View15.6.2. Using Strongly Typed Partial Views15.7. Using Child Actions15.7.1. Creating a Child Action15.7.2. Rendering a Child Action15.8. Summary
16. Model Templates
16.1. Using Templated View Helpers16.1.1. Styling Generated HTML16.1.2. Using Model Metadata16.1.2.1. Using Metadata to Control Editing and Visibility16.1.2.2. Using Metadata for Labels16.1.2.3. Using Metadata for Data Values16.1.2.4. Using Metadata to Select a Display Template16.1.2.5. Applying Metadata to a Buddy Class16.1.3. Working with Complex Type Parameters16.2. Customizing the Templated View Helper System16.2.1. Creating a Custom Editor Template16.2.2. Creating a Custom Display Template16.2.3. Creating a Generic Template16.2.4. Replacing the Built-in Templates16.2.5. Using the ViewData.TemplateInfo Property16.2.5.1. Respecting Data Formatting16.2.5.2. Working with HTML Prefixes16.2.6. Passing Additional Metadata to a Template16.3. Understanding the Metadata Provider System16.3.1. Creating a Custom Model Metadata Provider16.3.2. Customizing the Data Annotations Model Metadata Provider16.4. Summary
17. Model Binding
17.1. Understanding Model Binding17.2. Using the Default Model Binder17.2.1. Binding to Simple Types17.2.2. Binding to Complex Types17.2.2.1. Specifying Custom Prefixes17.2.2.2. Selectively Binding Properties17.2.3. Binding to Arrays and Collections17.2.3.1. Binding to Collections of Custom Types17.2.3.2. Binding to Collections with Nonsequential Indices17.2.3.3. Binding to a Dictionary17.3. Manually Invoking Model Binding17.3.1. Restricting Binding to a Specific Data Source17.3.2. Dealing with Binding Errors17.4. Using Model Binding to Receive File Uploads17.5. Customizing the Model Binding System17.5.1. Creating a Custom Value Provider17.5.2. Creating a Dependency-Aware Model Binder17.5.3. Creating a Custom Model Binder17.5.4. Creating Model Binder Providers17.5.5. Using the ModelBinder Attribute17.6. Summary
18. Model Validation
18.1. Creating the Project18.2. Explicitly Validating a Model18.3. Displaying Validation Messages18.3.1. Displaying Property-Level Validation Messages18.4. Using Alternative Validation Techniques18.4.1. Performing Validation in the Model Binder18.4.2. Specifying Validation Rules Using Metadata18.4.2.1. Creating a Custom Property Validation Attribute18.4.2.2. Creating a Model Validation Attribute18.4.3. Defining Self-validating Models18.4.4. Creating a Custom Validation Provider18.4.4.1. Registering a Custom Validation Provider18.5. Performing Client-Side Validation18.5.1. Enabling and Disabling Client-Side Validation18.5.2. Using Client-Side Validation18.5.3. Understanding How Client-Side Validation Works18.5.4. Customizing Client-Side Validation18.5.4.1. Explicitly Creating Validation HTML Attributes18.5.4.2. Creating Model Attributes That Support Client-Side Validation18.5.4.3. Creating Custom Client-Side Validation Rules18.6. Performing Remote Validation18.7. Summary
19. Unobtrusive Ajax
19.1. Using MVC Unobtrusive Ajax19.1.1. Creating the Project19.1.2. Enabling and Disabling Unobtrusive Ajax19.1.3. Using Unobtrusive Ajax Forms19.1.4. Understanding How Unobtrusive Ajax Works19.2. Setting Ajax Options19.2.1. Ensuring Graceful Degradation19.2.2. Providing the User with Feedback While Making an Ajax Request19.2.3. Prompting the User Before Making a Request19.3. Creating Ajax Links19.3.1. Ensuring Graceful Degradation for Links19.4. Working with Ajax Callbacks19.5. Working with JSON19.5.1. Adding JSON Support to the Controller19.5.2. Processing JSON in the Browser19.5.3. Detecting Ajax Requests in the Action Method19.5.4. Receiving JSON Data19.6. Summary
20. jQuery
20.1. Creating the Project20.2. Referencing jQuery20.3. Writing jQuery Code20.3.1. Creating a jQuery Sandbox20.3.1.1. Using Firefox20.3.1.2. Using Chrome20.4. Basic jQuery Theory20.4.1. Understanding jQuery Selectors20.4.1.1. Using Attribute Selectors20.4.2. Using jQuery Filters20.4.2.1. Using Content Filters20.4.2.2. Using Form Filters20.4.3. Understanding jQuery Methods20.4.4. Waiting for the DOM20.4.5. Using jQuery CSS Methods20.4.6. Working with the DOM20.5. Using jQuery Events20.6. Using jQuery Visual Effects20.7. Using jQuery UI20.7.1. Referencing jQuery UI20.7.2. Making Better Buttons20.7.3. Using a Slider20.8. Summary
III. Delivering Successful ASP.NET MVC 3 Projects
21. Security and Vulnerability
21.1. All Input Can Be Forged21.1.1. Forging HTTP Requests21.2. Cross-Site Scripting and HTML Injection21.2.1. Understanding an XSS Vulnerability21.2.2. Razor HTML Encoding21.2.3. Request Validation21.2.3.1. Disabling Request Validation21.2.4. JavaScript String Encoding and XSS21.3. Session Hijacking21.3.1. Defense via Client IP Address Checks21.3.2. Defense by Setting the HttpOnly Flag on Cookies21.4. Cross-Site Request Forgery21.4.1. Attack21.4.2. Defense21.4.3. Preventing CSRF Using the Antiforgery Helpers21.5. SQL Injection21.5.1. Attack21.5.2. Defense Using Parameterized Queries21.5.3. Defense Using Object-Relational Mapping21.6. Using the MVC Framework Securely21.6.1. Don't Expose Action Methods Accidentally21.6.2. Don't Allow Model Binding to Change Sensitive Properties21.7. Summary
22. Authentication and Authorization
22.1. Using Windows Authentication22.2. Using Forms Authentication22.2.1. Setting Up Forms Authentication22.2.1.1. Handling Login Attempts22.2.2. Using Cookieless Forms Authentication22.3. Using Membership, Roles, and Profiles22.3.1. Setting Up and Using Membership22.3.1.1. Setting Up SqlMembershipProvider22.3.1.2. Using SqlMembershipProvider with SQL Server Express22.3.1.3. Manually Preparing SQL Server22.3.1.4. Managing Membership22.3.1.4.1. Using the Web Site Administration Tool (WAT)22.3.1.4.2. Using the IIS .NET Users tool22.3.1.5. Creating a Custom Membership Provider22.3.2. Setting Up and Using Roles22.3.2.1. Setting Up SqlRoleProvider22.3.2.2. Managing Roles22.3.2.3. Creating a Custom Roles Provider22.3.3. Setting Up and Using Profiles22.3.3.1. Setting Up SqlProfileProvider22.3.3.2. Configuring, Reading, and Writing Profile Data22.3.3.2.1. Enabling Anonymous Profiles22.3.3.3. Creating a Custom Profile Provider22.4. Why You Shouldn't Use URL-Based Authorization22.5. Restricting Access Using IP Addresses and Domains22.6. Summary
23. Deployment
23.1. Preparing an Application for Deployment23.1.1. Detecting View Errors Before Deployment23.1.2. Configuring Dynamic Page Compilation23.1.3. Preparing for a Bin Deployment23.1.4. Preparing the Web.config File for Transformation23.1.4.1. Understanding the Transformation Structure23.1.4.2. Inserting Configuration Elements23.1.4.3. Removing Configuration Elements23.1.4.4. Setting and Removing Attributes23.1.4.5. Replacing Elements23.1.4.6. Using the Locator Attribute23.1.5. Preparing the Project for Database Deployment23.2. Understanding the IIS Fundamentals23.2.1. Understanding Web Sites23.2.2. Understanding Virtual Directories23.2.3. Understanding Application Pools23.2.4. Binding Web Sites to Hostnames, IP Addresses, and Ports23.3. Preparing the Server for Deployment23.4. Deploying an Application23.4.1. Deploying an Application by Copying Files23.4.2. Using a Deployment Package23.4.2.1. Creating the Deployment Package23.4.2.2. Deploying the Package23.4.3. Using One-Click Publishing23.5. Summary

Content preview from Pro ASP.NET MVC 3 Framework, Third Edition

Chapter 22. Authentication and Authorization

The MVC Framework is built on top of ASP.NET, and, of course, ASP.NET is built on top of the .NET Framework and tightly integrated with IIS. Lots of features in the underlying ASP.NET and .NET frameworks can be useful when building web applications, and in this chapter we will introduce to those that relate to authentication and authorization.

ASP.NET is a rich and complex platform, and, of course, there are many features that we don't touch upon at all in a book focused on the MVC Framework. If you want to go beyond MVC and look at the broader topics, then Adam has written a couple of books you might find useful: Pro ASP.NET 4 in C# 2010 (written with Matt MacDonald) and ASP.NET in Context; both are ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781430234043Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Pro ASP.NET MVC 3 Framework, Third Edition

by Adam Freeman, Steven Sanderson

Chapter 22. Authentication and Authorization

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.