Improper Authentication and Session Management
Most web applications have an authentication module, and we should be careful when writing code for it. We could make mistakes like not removing the authentication cookies after a successful logout. This kind of mistake allows attackers to steal user credentials such as cookies and session values, and may result in attackers being able to access the complete application and cause major negative impacts.
In this post, let's go through another feature that got introduced to ASP.NET Core in .NET 6 Preview 4. That is Async Streaming.
Building off the improvements to the managed sockets implementation in .NET Core we have changed the default transport in Kestrel from libuv to sockets.
Full Stack ASP.NET Core 2.0 MVC Forum Build
Topics Covered:
- Setting up a new ASP .NET Core 2.0 MVC web application with Identity user authentication in Visual Studio
- Separating Web, Services, and Data Access Layers in our solution
- Setting up tests with NUnit and .NET Core virtual in-memory database
- Debugging / Fixing bugs
- Implementing the MVC (Model-View-Controller) pattern
- Dependency Injection of Services into our Controllers
- Using input forms to pass data from our Views to our Controllers
- Azure file storage for Profile Image uploads
- Azure SQL database hosting
- SQL Database seeding for starting the application with a super-user
- Code-first database migrations
- Writing SQL queries to inspect data in our database
- Deploying the application to Azure.
ASP.NET Core and Blazor futures Q&A | DIS201H
#MSBuild
Join us for a discussion on the future of web development with the ASP.NET Core team. Get the team's perspective first-hand on the roadmap for ASP.NET Core and Blazor in .NET 8 and get all of your burning questions answered. We discuss Blazor, Native AOT, cloud native development, and anything else that you want to ask us about.
AutoMapper has been a popular library in the .NET open source community for a long time. As their site says:
AutoMapper is a simple little library built to solve a deceptively complex problem - getting rid of code that mapped one object to another. This type of code is rather dreary and boring to write, so why not invent a tool to do it for us?
| Version | Original Release Date | Latest Patch Version | Patch Release Date | Support Level | End of Support |
|---|---|---|---|---|---|
| .NET Core 3.1 | Scheduled for November 2019 | | | Will be LTS when released | |
| .NET Core 3.0 | Scheduled for September 23, 2019 | | | Will be Current when released | |
| .NET Core 2.2 | December 4, 2018 | 2.2.5 | May 14, 2019 | Current | December 23, 2019 |
| .NET Core 2.1 | May 30, 2018 | 2.1.11 | May 14, 2019 | LTS | At least three years from LTS declaration (August 21, 2018) |
| .NET Core 2.0 | August 14, 2017 | 2.0.9 | July 10, 2018 | EOL | October 1, 2018 |
| .NET Core 1.1 | November 16, 2016 | 1.1.13 | May 14, 2019 | Maintenance | June 27 2019 |
| .NET Core 1.0 | June 27, 2016 | 1.0.16 | May 14, 2019 | Maintenance | June 27 2019 |
