Minimal APIs are the biggest shift in ASP.NET Core since version 1.0. They remove the MVC ceremony (Controllers, Actions, Filters) in favor of a fluent lambda-based syntax. The Code Is it just for tiny apps? No. Performance is technically better than MVC (fewer allocations, no Filter Pipeline overhead). However, organization becomes the challenge. You don’t […]
Read more →GraphQL vs gRPC vs REST: The 2021 Guide
Choosing the right API paradigm is critical. It’s not about which is “better,” but which fits the consumption model. Decision Matrix Feature REST gRPC GraphQL Protocol HTTP/1.1 HTTP/2 HTTP/1.1 or 2 Data Format JSON Protobuf (Binary) JSON Use Case Public APIs Internal Microservices Mobile/Frontend BFF Browser Support Native Requires Proxy (gRPC-Web) Native Why GraphQL for […]
Read more →IdentityServer4 is Dead: Long Live OpenIddict
With IdentityServer4 reaching End of Life (and its successor Duende becoming commercial), .NET developers need an open-source alternative for OIDC providers. **OpenIddict** is the answer. Configuration OpenIddict integrates deeply with ASP.NET Core Identity and EF Core. Key Takeaways It’s more “bare metal” than IdentityServer; you build your own UI. Supports the full OAuth2/OIDC test suite.
Read more →Azure Container Apps: KEDA and Dapr Managed
Azure Container Apps (ACA) is the “Serverless Containers” offering we’ve been waiting for. Built on Kubernetes but hiding the cluster, it integrates **KEDA** (for event-driven scaling) and **Dapr** (for building blocks) natively. Scaling to Zero Unlike App Service, ACA can scale to 0 replicas when no events are processing, saving money. Dapr Integration Enable Dapr […]
Read more →.NET 6 Minimal APIs: Testing Strategies
Minimal APIs are great, but how do you test them without a `Startup` class? WebApplicationFactory You must expose the internal `Program` class to your test project. Now you can use `WebApplicationFactory<Program>` in xUnit to spin up the in-memory server.
Read more →AKS Network Policy: Locking Down Traffic
By default, all pods in a Kubernetes cluster can talk to each other. This is a security risk. If a frontend pod is compromised, the attacker can scan your database pod. Network Policies act as an internal firewall. Deny All Ingress Start by blocking everything. Allow Frontend to Backend Key Takeaways You must enable a […]
Read more →