.NET Blog
Free. Cross-platform. Open source. A developer platform for building all your apps.
Featured posts
Aspire 9.4 is here with a CLI and interactive dashboard features
Aspire 9.4 is packed with new features, integrations, and improvements
Latest posts
Secure ASP.NET ViewState
During an appearance on the .NET Rocks podcast last week, a question was raised about securely sending information through ASP.NET ViewState. I responded to the question by indicating that the typical security concern for web content is not to trust any content submitted from the web, including ViewState. After that podcast was published, several of my colleagues corrected me: in ASP.NET 4.5 the encryption of ViewState received a significant rewrite that addressed this issue and effectively makes ViewState very secure. Encrypted and MAC’d In older versions of ASP.NET, there was an option to “EnableViewStateMa...
Reusing Configuration Files in ASP.NET Core
Introduction The release of ASP.NET Core 1.0 has enticed existing ASP.NET customers to migrate their projects to this new platform. While working with a customer to move their assets to ASP.NET Core, we encountered an obstacle. Our customer had a many configuration files () they used regularly. They had hundreds of configuration files that would take time to transform into a format that could be consumed by the existing configuration providers. In this post, we'll show how to tackle this hurdle by utilizing ASP.NET Core's configuration extensibility model. We will write our own configuration provider to reuse th...
Announcing the DotNetCompilerPlatform 1.0.2 release
Update Microsoft.CodeDom.Providers.DotNetCompilerPlatform is now open sourced on GitHub. If you have any suggestion or issue, please go to this link and post your thought there. Today I'm pleased to announce that the Microsoft.CodeDom.Providers.DotNetCompilerPlatform 1.0.2 package is released on NuGet. It enables ASP.NET to support the new language features and improves the compilation performance. To install this NuGet package, open NuGet Package Manager in visual studio, search Microsoft.CodeDom.Providers.DotNetCompilerPlatform and click Install/Update button. What’s new in the new release ...
The week in .NET: On .NET with Steeltoe – C# Functional Extensions – Firewatch
To read last week's post, see The week in .NET: .NET Core 1.0.1 – On .NET with Peachpie – Avalonia – Folk Tale. On .NET Last week, we had David Morhovich and Zach Brown on the show to talk about Steeltoe: This week, we'll speak with Sébastien Ros about Orchard 2, the new version of the .NET CMS that can run on .NET Core. The show begins at 10AM Pacific Time on Channel 9. We'll take questions on Gitter, on the dotnet/home channel. Please use the tag. It's OK to start sending us questions in advance if you can't do it live during the show. Package of the week: C# Functional Extensions C# functional extensio...
New experience for NuGet Documentation
Last month, we launched a preview of the revamped Nuget docs experience. We made a number of improvements: We would like to thank you for trying out the preview and giving us valuable feedback. We have incorporated your feedback and ironed out some wrinkles we found along the way. Today, we are going live with the new experience on docs.nuget.org. Will my existing references to documentation break? Existing references should still work. We have updated the old docs with permanent redirects which will redirect you to the new page. If you find a broken reference, please open an issue on our GitHub repo ...
GLAD is available
GC ETW series - GC ETW Events - Part 1 GC ETW Events - Part 2 GC ETW Events - Part 3 GC ETW Events - Part 4 Processing GC ETW Events Programmatically with the GLAD Library (this post) End of last year I mentioned we wanted to provide an API for you to really investigate GC/managed memory related performance called GLAD. Well, the source finally got opened source on github. So GLAD is available. The repo is called PerfView but you actually just need the TraceEvent project (but it’s much easier to just build the whole solution then add the reference to the resulting Microsoft.Diagnostics.Traci...
Custom ASP.NET Core Middleware Example
One of the great things about ASP.NET Core is its extensibility. The behavior of an ASP.NET Core app's HTTP request handling pipeline can be easily customized by specifying different middleware components. This allows developers to plug in request handlers like MVC middleware, static file providers, authentication, error pages, or even their own custom middleware. In this article, I will walk you through how to create custom middleware to handle requests with simple SOAP payloads. A Disclaimer Hopefully this article provides a useful demonstration of creating custom middleware for ASP.NET Core in a real-world s...
Introducing IdentityServer4 for authentication and access control in ASP.NET Core
This is a guest post by Brock Allen and Dominick Baier. They are security consultants, speakers, and the authors of many popular open source security projects, including IdentityServer. Modern applications need modern identity. The protocols used for implementing features like authentication, single sign-on, API access control and federation are OpenID Connect and OAuth 2.0. IdentityServer is a popular open source framework for implementing authentication, single sign-on and API access control using ASP.NET. While IdentityServer3 has been around for quite a while, it was based on ASP.NET 4.x and Katana. For the...
The week in .NET: .NET Core 1.0.1 – On .NET with Peachpie – Avalonia – Folk Tale
To read last week's post, see The week in .NET – 9/7/2016. .NET Core 1.0.1 shipped! We shipped .NET Core 1.0.1 yesterday. Check out the announcement! On .NET Last week, we spoke with Benjamin Fistein and Jakub MÃÅ¡ek about Peachpie, a PHP compiler for .NET. We've had Ben and Jakub on the show before, and they came back to show us some of the new features they've built: .NET Core compatibility, debugging in VS Code, Docker deployment, and NuGet package building and consumption. This week, we'll speak about Steeltoe, a .NET toolkit for common microservice patterns. The show begins at 10AM Pacific Time on Chan...