Practical recipes for tackling vulnerabilities in your ASP.NET web applications
Author: Roman Canlas
Publisher: Packt Publishing Ltd
Learn how to secure your ASP.NET Core web app through robust and secure code Key Features Discover the different types of security weaknesses in ASP.NET Core web applications and learn how to fix them Understand what code makes an ASP.NET Core web app unsafe Build your secure coding knowledge by following straightforward recipes Book Description ASP.NET Core developers are often presented with security test results showing the vulnerabilities found in their web apps. While the report may provide some high-level fix suggestions, it does not specify the exact steps that you need to take to resolve or fix weaknesses discovered by these tests. In ASP.NET Secure Coding Cookbook, you'll start by learning the fundamental concepts of secure coding and then gradually progress to identifying common web app vulnerabilities in code. As you progress, you'll cover recipes for fixing security misconfigurations in ASP.NET Core web apps. The book further demonstrates how you can resolve different types of Cross-Site Scripting. A dedicated section also takes you through fixing miscellaneous vulnerabilities that are no longer in the OWASP Top 10 list. This book features a recipe-style format, with each recipe containing sample unsecure code that presents the problem and corresponding solutions to eliminate the security bug. You'll be able to follow along with each step of the exercise and use the accompanying sample ASP.NET Core solution to practice writing secure code. By the end of this book, you'll be able to identify unsecure code causing different security flaws in ASP.NET Core web apps and you'll have gained hands-on experience in removing vulnerabilities and security defects from your code. What you will learn Understand techniques for squashing an ASP.NET Core web app security bug Discover different types of injection attacks and understand how you can prevent this vulnerability from being exploited Fix security issues in code relating to broken authentication and authorization Eliminate the risks of sensitive data exposure by getting up to speed with numerous protection techniques Prevent security misconfiguration by enabling ASP.NET Core web application security features Explore other ASP.NET web application vulnerabilities and secure coding best practices Who this book is for This ASP.NET Core book is for intermediate-level ASP.NET Core web developers and software engineers who use the framework to develop web applications and are looking to focus on their security using coding best practices. The book is also for application security engineers, analysts, and specialists who want to know more about securing ASP.NET Core using code and understand how to resolve issues identified by the security tests they perform daily.
Get up to speed with the latest features of C# 8, ASP.NET Core 3 and .NET Core 3.1 LTS to create robust and maintainable web services Key Features Apply design patterns and techniques to achieve a reactive, scalable web service Document your web services using the OpenAPI standard and test them using Postman Explore mechanisms to implement a secure web service using client-side SSL and token authentication Book Description In recent times, web services have evolved to play a prominent role in web development. Applications are now designed to be compatible with any device and platform, and web services help us keep their logic and UI separate. Given its simplicity and effectiveness in creating web services, the RESTful approach has gained popularity, and this book will help you build RESTful web services using ASP.NET Core. This REST book begins by introducing you to the basics of the REST philosophy, where you'll study the different stages of designing and implementing enterprise-grade RESTful web services. You'll also gain a thorough understanding of ASP.NET Core's middleware approach and learn how to customize it. The book will later guide you through improving API resilience, securing your service, and applying different design patterns and techniques to achieve a scalable web service. In addition to this, you'll learn advanced techniques for caching, monitoring, and logging, along with implementing unit and integration testing strategies. In later chapters, you will deploy your REST web services on Azure and document APIs using Swagger and external tools such as Postman. By the end of this book, you will have learned how to design RESTful web services confidently using ASP.NET Core with a focus on code testability and maintainability. What you will learn Gain a comprehensive working knowledge of ASP.NET Core Integrate third-party tools and frameworks to build maintainable and efficient services Implement patterns using dependency injection to reduce boilerplate code and improve flexibility Use ASP.NET Core's out-of-the-box tools to test your applications Use Docker to run your ASP.NET Core web service in an isolated and self-contained environment Secure your information using HTTPS and token-based authentication Integrate multiple web services using resiliency patterns and messaging techniques Who this book is for This book is for anyone who wants to learn how to build RESTful web services with the ASP.NET Core framework to improve the scalability and performance of their applications. Basic knowledge of C# and .NET Core will help you make the best use of the code samples included in the book.
ASP.NET Core in Action, Second Edition opens up the world of cross-platform web development with ASP.NET Core. You’ll start with a crash course in .NET Core, then you’ll begin to build amazing web applications step by step, systematically adding essential features. Along the way, you’ll mix in important process steps like testing, multiplatform deployment, and security. Fully updated to ASP.NET 3.1, ASP.NET Core in Action, Second Edition is a hands-on primer to building cross-platform web applications with your C# and .NET skills. Even if you’ve never worked with ASP.NET you’ll start creating productive cross-platform web apps fast! ASP.NET Core in Action, Second Edition opens up the world of cross-platform web development with ASP.NET Core. You’ll start with a crash course in .NET Core, then you’ll begin to build amazing web applications step by step, systematically adding essential features. Along the way, you’ll mix in important process steps like testing, multiplatform deployment, and security. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.
Enhance your C# and .NET skills by mastering the process of developing professional-grade web applications
Author: Ravindra Akella
Publisher: Packt Publishing Ltd
Become a professional .NET developer by learning expert techniques for building enterprise-grade applications Key Features Explore the advanced features of C# and .NET 5 to enhance your code and productivity Follow clear and easy instructions for building an end-to-end enterprise application Learn how to build scalable web applications and host them on the cloud Book Description .NET Core is one of the most popular programming platforms in the world for an increasingly large community of developers thanks to its excellent cross-platform support. This book will show you how to confidently use the features of .NET 5 with C# 9 to build robust enterprise applications. Throughout the book, you'll work on creating an enterprise app and adding a key component to the app with each chapter, before ?nally getting it ready for testing and deployment. You'll learn concepts relating to advanced data structures, the Entity Framework Core, parallel programming, and dependency injection. As you progress, you'll cover various authentication and authorization schemes provided by .NET Core to make your apps and APIs secure. Next, you'll build web apps using ASP.NET Core 5 and deploy them on the cloud while working with various cloud components using Azure. The book then shows you how to use the latest Microsoft Visual Studio 2019 and C# 9 to simplify developer tasks, and also explores tips and tricks in Visual Studio 2019 to improve your productivity. Later, you'll discover various testing techniques such as unit testing and performance testing as well as di?erent methods to deploy enterprise apps. By the end of this book, you'll be able to create enterprise apps using the powerful features of .NET 5 and deploy them on the cloud. What you will learn Design enterprise apps by making the most of the latest features of .NET 5 Discover di?erent layers of an app, such as the data layer, API layer, and web layer Explore end-to-end architecture, implement an enterprise web app using .NET and C# 9, and deploy the app on Azure Focus on the core concepts of web application development such as dependency injection, caching, logging, con?guration, and authentication, and implement them in .NET 5 Integrate the new .NET 5 health and performance check APIs with your app Understand how .NET 5 works and contribute to the .NET 5 platform Who this book is for If you are a developer, architect, or senior programmer who wants to leverage the features of .NET 5 and the C# language, as well as grasp essential techniques to build your skills, then this C# .NET 5 book is for you. Beginner to intermediate-level knowledge of the .NET framework and C# programming is required to understand the concepts covered in this book more effectively.
Build Real-World Scalable Full-Stack Applications Using Vue. Js 3, Typescript, . Net 5, and Azure
Author: Devlin Basilan Duldulao
Full-Stack Web Development with .NET Core and Angular
Author: Valerio De Sanctis
Publisher: Packt Publishing Ltd
Develop a simple, yet fully-functional modern web application using ASP.NET Core MVC, Entity Framework and Angular 5. About This Book Based on the best-selling book ASP.NET Core and Angular 2 Easily build a complete single page application with two of the most impressive frameworks in modern development, ASP.NET Core and Angular Bring together the capabilities and features of both Angular 5 and ASP.NET Core 2 for full stack development Discover a comprehensive approach to building your next web project-From managing data, to application design, through to SEO optimization and security Who This Book Is For This book is for seasoned ASP.NET developers who already know about ASP.NET Core and Angular in general, but want to know more about them and/or understand how to blend them together to craft a production-ready SPA. What You Will Learn Use ASP.NET Core to its full extent to create a versatile backend layer based on RESTful APIs Consume backend APIs with the brand new Angular 5 HttpClient and use RxJS Observers to feed the frontend UI asynchronously Implement an authentication and authorization layer using ASP.NET Identity to support user login with integrated and third-party OAuth 2 providers Configure a web application in order to accept user-defined data and persist it into the database using server-side APIs Secure your application against threats and vulnerabilities in a time efficient way Connect different aspects of the ASP. NET Core framework ecosystem and make them interact with each other for a Full-Stack web development experience In Detail Become fluent in both frontend and backend web development by combining the impressive capabilities of ASP.NET Core 2 and Angular 5 from project setup right through the deployment phase. Full-stack web development means being able to work on both the frontend and backend portions of an application. The frontend is the part that users will see or interact with, while the backend is the underlying engine, that handles the logical flow: server configuration, data storage and retrieval, database interactions, user authentication, and more. Use the ASP.NET Core MVC framework to implement the backend with API calls and server-side routing. Learn how to put the frontend together using top-notch Angular 5 features such as two-way binding, Observables, and Dependency Injection, build the Data Model with Entity Framework Core, style the frontend with CSS/LESS for a responsive and mobile-friendly UI, handle user input with Forms and Validators, explore different authentication techniques, including the support for third-party OAuth2 providers such as Facebook, and deploy the application using Windows Server, SQL Server, and the IIS/Kestrel reverse proxy. Style and approach More than just a technical manual, this guide takes you through the most important technical facets of developing with these two hugely popular frameworks and then demonstrates how to put those skills into practice. It's a book that recognizes that what's really important is the end product.
Effective ways to build modern, interactive web applications with ASP.NET Core MVC 2.0
Author: Jason De Oliveira
Publisher: Packt Publishing Ltd
Full-stack web development with .NET 5 and Angular 11, 4th Edition
Author: Valerio De Sanctis
Publisher: Packt Publishing Ltd
By covering the impressive capabilities of ASP.NET Core 5 and Angular 11, right from project setup through to the deployment phase, this fully revised and updated edition will help you develop your skills effectively.
Angular 5 and .NET Core 2 updates for this book are now available. Follow the Download Source Code link for this book on the Apress website. Discover Angular, the leading client-side web framework, from the point of view of an ASP.NET Core MVC developer. Best-selling author Adam Freeman brings these two key technologies together and explains how to use ASP.NET Core MVC to provide back-end services for Angular applications. This fast-paced, practical guide starts from the nuts and bolt and gives you the knowledge you need to combine Angular (from version 2.0 up) and ASP.NET Core MVC in your projects. What You’ll Learn Gain a solid understanding of how ASP.NET Core MVC and Angular can work together Use Visual Studio 2017 to develop Angular/ASP.NET Core MVC projects Create ASP.NET Core RESTful web services to support Angular applications Expose data from Entity Framework Core to Angular applications Use ASP.NET Core Identity to provide security services to Angular applications Each topic is covered clearly and concisely and is packed with the essential details you need to learn to be truly effective. Who This Book Is For This book is for developers with a knowledge of ASP.NET Core MVC who are introducing Angular into their projects.
Full-stack web development using .NET 5, React 17, and TypeScript 4, 2nd Edition
Author: Carl Rippon
Publisher: Packt Publishing Ltd
ASP.NET Core is a powerful framework for architecting a resilient backend for scalable web applications. When combined with the solid frontend development capabilities of React, it enables you to build robust full-stack web applications. This book shows .NET developers how to harness the full potential of React using ASP.NET Core as the backbone.
Build on your existing programming skills and upskill to professional-level C# programming. Summary In Code Like A Pro in C# you will learn: Unit testing and test-driven development Refactor a legacy .NET codebase Principles of clean code Essential backend architecture skills Query and manipulate databases with LINQ and Entity Framework Core Critical business applications worldwide are written in the versatile C# language and the powerful .NET platform, running on desktops, cloud systems, and Windows or Linux servers. Code Like a Pro in C# makes it easy to turn your existing abilities in C# or another OO language (such as Java) into practical C# mastery. There’s no “Hello World” or Computer Science 101 basics—you’ll learn by refactoring an out-of-date legacy codebase, using new techniques, tools, and best practices to bring it up to modern C# standards. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology You know the basics, now get ready for the next step! Pro-quality C# code is efficient, clean, and fast. Whether you’re building user-facing business applications or writing data-intensive backend services, the experience-based, practical techniques in this book will take your C# skills to a new level. About the book Code Like a Pro in C# teaches you to how write clean C# code that’s suitable for enterprise applications. In this book, you’ll refactor a legacy codebase by applying modern C# techniques. You’ll explore tools like Entity Framework Core, design techniques like dependency injection, and key practices like testing and clean coding. It’s a perfect path to upgrade your existing C# skills or shift from another OO language into C# and the .NET ecosystem. What's inside Unit testing and test-driven development Refactor a legacy .NET codebase Principles of clean code Query and manipulate databases with LINQ and Entity Framework Core About the reader For developers experienced with object-oriented programming. No C# experience required. About the author Jort Rodenburg is a software engineer who has taught numerous courses on getting up to speed with C# and .NET. Table of Contents PART 1 USING C# AND .NET 1 Introducing C# and .NET 2 .NET and how it compiles PART 2 THE EXISTING CODEBASE 3 How bad is this code? 4 Manage your unmanaged resources! PART 3 THE DATABASE ACCESS LAYER 5 Setting up a project and database with Entity Framework Core PART 4 THE REPOSITORY LAYER 6 Test-driven development and dependency injection 7 Comparing objects 8 Stubbing, generics, and coupling 9 Extension methods, streams, and abstract classes PART 5 THE SERVICE LAYER 10 Reflection and mocks 11 Runtime type checking revisited and error handling 12 Using IAsyncEnumerable and yield return PART 6 THE CONTROLLER LAYER 13 Middleware, HTTP routing, and HTTP responses 14 JSON serialization/deserialization and custom model binding
ASP.NET Core is a re-imagining of the .NET Framework that frees developers from Visual Studio and Windows. ASP.NET Core in Action is for C# developers without any web development experience who want to get started and productive using ASP.NET Core to build web applications. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.
Design, develop, and deploy a real-world web application by leveraging modern open source technologies. This book shows you how to use ASP.NET Core to build cross-platform web applications along with SignalR to enrich the application by enabling real-time communication between server and clients. You will use Docker to containerize your application, integrate with GitHub to package the application, and provide continuous deployment to Azure’s IaaS platform. Along the way, Real-Time Web Application Development covers topics including designing a Materialize CSS theme, using a test-driven development approach with xUnit.net, and securing your application with the OAuth 2.0 protocol. To further your understanding of the technology, you will learn logging and exception handling; navigation using view components; and how to work with forms and validations. The rich code samples from this book can be used to retrofit or upgrade existing ASP.NET Core applications. What You Will Learn Design and develop a real-world web application Implement security and data storage with OAuth2 and Azure Table Storage Orchestrate real-time notifications through SignalR Use GitHub and Travis CI for continuous integration of code Master Docker containerization and continuous deployment with Docker Cloud to Azure Linux virtual machines Who This Book Is For Developers and software engineers interested in learning an end-to-end approach to application development using Microsoft technologies.
Understand modern architectures, migration best practices, and the new features in .NET 5
Author: Hammad Arif
Publisher: Packt Publishing Ltd
This book is a practical guide to .NET 5 for experienced developers and software architects, featuring step-by-step explanations of essential concepts and practical examples. You’ll also explore a comparison of .NET 5 with legacy technologies, why it is beneficial, and how the platform can be leveraged in real-world scenarios.
Kick-start your ASP.NET web development journey with the help of step-by-step tutorials and examples
Author: Andreas Helland
Publisher: Packt Publishing Ltd
ASP.NET Core 5 for Beginners is a practical guide for developers for building dynamic and powerful web applications with the ASP.NET Core framework and C#. From basic ASP terminologies to creating a single-page application, and from testing and maintaining the app to deploying it on the cloud, this book covers everything you need to get started.
Create a Single Page App with Blazor Server and Entity Framework Core
Author: Jignesh Trivedi
Publisher: BPB Publications
Want to learn how to build ASP.NET Core 1.1 MVC Web Applications? Prerequisites: * C# (Intermediate level) * HTML5/CSS3 (Basic knowledge) This book is primarily aimed at developers who want to learn how to build ASP.NET Core 1.1 MVC Applications. You should be an intermediate level C# developer with some experience in HTML5 and CSS3. The book presupposes that you have a solid C# foundation since the language won't be explained in any detail. You will learn ASP.NET Core 1.1 by building two MVC applications. The first application will be built using an empty template. The goal is to get you familiar with ASP.NET Core 1.1 by adding middleware and services one piece at a time, building a basic application. Then you will build a second MVC application using a template that already contains support for MVC, Entity Framework Core, and user authentication. This application is a video course website, where users can register to gain access to video courses. If you are already familiar with MVC 5, the content in this book can get you started with ASP.NET Core 1.1 in a fast, no-fluff way. It's important to mention that this book is practical and tactical, where you will learn as you progress through the modules and build real web applications in the process. To spare you countless pages of fluff (filler material), only valuable information, pertinent to the task at hand, is discussed. The benefit is a shorter and more condensed book, which will save you time and give you a more enjoyable experience. The goal is to learn ASP.NET Core 1.1 by building two web applications, one from scratch and one from an existing template. This experience is something you can put in your CV when applying for a job or a consultant position, or when negotiating a higher salary. Technologies, frameworks and languages you will use: * ASP.NET Core 1.1 MVC (The framework that you will use) * Services (To provide you own functionality as a reusable service) * Middleware (To provide you own functionality to HTTP Request pipeline) * Entity Framework (To crate and communicate with a database) * View Component (To render data in the _Layout view with model data) * Razor syntax (To include server-side code in views) * Bootstrap (Used for styling and to create a responsive design) * LINQ (To query the database) * Dependency Injection (To inject objects into constructors) * Tag Helper (to clean up the HTML and enable re-use) * HTML Helper methods (to clean up your HTML and enable re-use) * Bower/NuGet (To install necessary front-end/back-end libraries) What you will implement: * Implement a web application from an empty template. * Implement a web application from an existing template. * Create a "real world" code-first database using Entity Framework Core. * Add and modify models, views and controllers to perform CRUD operations against the database. * Use client-side and server-side validation. * Secure the controllers, actions and view content with authorization and roles. * Styling HTML with CSS and Bootstrap. * Create a responsive website. * Register users with the site. * Manage users and their video courses. I hope you love the book! Sincerely, Jonas Fagerberg Now click the Buy button and start reading the book.
With MVC, Razor Pages, Web API, jQuery, Angular, SQL Server, and NoSQL
Author: Bipin Joshi
Want to learn how to build ASP.NET Core 1.1 Web APIs? Prerequisites:* C# (Intermediate level; including Generics, Reflection and Object-Oriented Programming (OOP)) Need help? Feel free to contact me at: [email protected] Code: https://github.com/csharpschool/AspNetCoreWebAPI Errata: https://github.com/csharpschool/AspNetCoreVideo/issues This book is primarily aimed at developers who want to learn how to build ASP.NET Core 1.1 Web APIs; no user interface will be built; instead, you will use a tool called Postman to make requests and to receive responses from the Web API. You should be an intermediate level C# developer with some experience in object-oriented programming (OOP), generics, and reflection. The book presupposes that you have a solid C# foundation since the language won't be explained in any detail. You will learn ASP.NET Core 1.1 Web API by building three services that handle data used in four controllers. An empty template will be used to build the Web API application from the ground up. The goal is to get you familiar with ASP.NET Core 1.1 Web API by adding middleware and services one piece at a time, building a basic application. The first service will use in-memory data stored in collections to make it easier for you to learn Web API basics. The second service will implement the same interface that the in-memory service uses to interact with a SQL Server database using Entity Framework. The third service will be generic, using reflection in one of its methods. Generics will make it possible to reuse the same methods when interacting with all tables in the database instead of creating a set of methods for each table. The content in this book will get you started with Web APIs in a fast, no-fluff way. It's important to mention that this book is practical and tactical, where you will learn as you progress through the modules and build a real Web API step-by-step. To spare you countless pages of fluff (filler material), only valuable information, pertinent to the task at hand, is discussed. The benefit is a shorter and more condensed book, which will save you time and give you a more enjoyable experience. The goal is to learn ASP.NET Core 1.1 Web API by implementing three different scenarios in a Web API application from scratch using an empty project template. This experience is something you can put in your CV when applying for a job or a consultant position, or when negotiating a higher salary.Technologies, frameworks and languages you will use:* Postman (To send requests and receive responses from the Web API)* Visual Studio 2017* ASP.NET Core 1.1 MVC/Web API (The framework that you will use)* Services (To provide you own functionality as a reusable service)* Middleware (To provide you own functionality to HTTP Request pipeline)* Entity Framework (To crate and communicate with a database)* LINQ (To query the database)* Dependency Injection (To inject objects into constructors)* NuGet (To install necessary libraries) What you will implement:* A Web API application from an empty template.* Create a "real world" code-first database using Entity Framework Core.* Add and modify entity models to perform CRUD operations against the database. I hope you love the book!Sincerely,Jonas Fagerberg Now click the Buy button and start reading the book.