Discussing how exceptions can be handled in a centralized spot and how to return consistent responses. Exception logging is also centralized in the same approach. — UPDATE April 10, 2022: all projects in the GitHub repo have been upgraded to .NET 5. Motivation I adopted a REST API project today which had no exception handling or logging, making it really hard to investigate issues. So I spent an hour adding a centralized exception handler and structured logging…

Part 1 : Discuss how to design and complete long-running tasks outside of HTTP requests in RESP API, as recommended by Microsoft on ASP.NET Core Performance Best Practices. — Background Most applications have some tasks that take longer than normal to complete. These tasks can be to generate a complex ad-hoc report for downloading, to trigger and wait for a CPU-intense computation, or to perform a series of small tasks that add up the whole processing time. Although there is…

UPDATED 2020/10/16: - All commands have been updated so that this article is up-to-date! I have recently installed Redis on our web server at work and used it as the session engine in order to improve the performance of our web application. Redis successfully improved the session time by 99.97%…

Discussing how to implement an application-specific JWT token service provider using ASP.NET Core Identity in Clean Architecture. — Background OAuth 2.0 is quite popular and is in-fact adopted almost everywhere now. Even if you haven’t developed any OAuth workflows, I am fairly certain that you have used it. Every time you provide consent to allow a specific application to access data on your behalf from Google, Facebook, or GitHub…

Discuss how to build a multitenant web API application with partition per tenant data isolation using Azure Cosmos DB in Clean Architecture. — Background When building multi-tenant applications using Azure Cosmos DB (or other NoSQL databases), there are multiple popular data isolation models: Partition key per tenant Container per tenant Database per tenant Microsoft has a detailed documentation, Multitenancy and Azure Cosmos DB, covering how Azure Cosmos DB can support different isolation models in…

Discuss popular isolation models for multitenant applications using Azure Cosmos DB or similar NoSQL databases. — Background Multitenancy refers to a software architecture pattern, which allows multiple customers (i.e., tenants) to share the same software application as well as the database. …

Discuss how to access a web API application that is protected by a central authentication server and requires JWT token authentication. — How to get access to a web API protected by an authentication server? In the last episode, our web API asked for protection from the mighty authority and was given a royal name called Farmland Web API. Now we have a client (a merchant) who wants to access the web API (or, buy grains from the farmland), how does the merchant get access…

Discuss how to protect a web API application with JWT token authentication using your own authentication server leveraging Identity Server. — How can a web API get protected by an authentication server? Let’s imagine the web API and the authentication can talk… Web API says: “Mighty authority, protect my precious land please…” Authentication server says “Sure, I will do two things to protect you! First I will grant you a name called Farmland. Second, I will issue tickets ONLY to people who…

Discuss how to avoid creating dependent objects manually in order to improve maintainability using dependency injection and abstraction. — Background You probably see the “new” keyword every day. In simple cases, e.g., creating instances for data transfer object (DTO) or plain old class object (POCO), it is perfectly good practice to use the “new” keyword. However, in classes where complex behaviour or state exists, using “new” keyword to manually initialize…