Authentication is usually one of the first security decisions made when building an ASP.NET Core application. For many applications, the architecture looks like this: User | v ASP.NET Core | v Identity Provider | v Application | v PostgreSQL The application authenticates the user, creates an application identity, and then connects to PostgreSQL using a…
Author: Pablo Francesco
ASP.NET Core HTTP/3 Benchmarking Under Actual API Load
HTTP/3 is more than just a protocol specification to keep an eye on. Thru QUIC, ASP.NET Core Kestrel supports HTTP/3, and Microsoft is refining its implementation. Compared to earlier HTTP versions, HTTP/3 offers separate streams, uses QUIC rather than TCP, and can lower connection-establishment time. However, the crucial query for API developers is not: Is…
Using Modern.NET’s Integrated Rate Limiting and Output Caching
Third-party middleware packages are no longer necessary thanks to native performance features included in modern.NET: While output caching significantly lowers database load by storing whole HTTP replies server-side, rate limitation shields your APIs against misuse and denial-of-service attacks. Step 1: Configuring Built-In Rate Limiting Rate limiting controls the frequency of requests clients can make to…
Best Practices for Authentication and Authorization in ASP.NET Core 10
One of the most important components of any online application is security. Protecting user identities, sensitive company data, and APIs becomes more crucial as apps develop. Even though ASP.NET Core offers a strong foundation for authorization and authentication, incorrect implementation can expose apps to security threats and illegal access. With its configurable authentication schemes, policy-based…
You Don’t Need to Create All Properties Inside a DTO to Successfully Deserialize
The example below might seem like very simple advice, but I found people across many codebases do not know this. This, in turn, leads to excessive usage of the JsonNode class, forcing developers to lose the benefits of compiler support in a strongly typed language. Example JSON Consider the JSON below: string json = “””…