Posts

Showing posts from September, 2026

.NET Aspire: Using .NET 10 Aspire Architecture for Application Implementation

Image
In this article we will see the .NET Aspire for the application development. The application implemented is online shopping portal based on independant services. MS-Online Shop is a cloud-ready shopping application built with .NET Aspire, Blazor, YARP API Gateway, SQL Server, Redis, and small focused services for identity, products, orders, and payments. The application supports customer and seller workflows, JWT authentication, product categories and manufacturers, Indian rupee pricing, and page-level light/dark theme support. Need of Docker for This Application Docker is needed because this application does not run only one web project. It also needs backing infrastructure such as SQL Server and Redis. .NET Aspire can start and connect these resources automatically, but container resources require a container runtime. On a developer machine, Docker Desktop or another compatible container runtime provides that environment. In this solution Docker is mainly used for: ...

ASP.NET Core 10: Securing a .NET 10 Minimal API with ASP.NET Core Identity Built-in Endpoints, EF Core & Swagger

In this article, we will explore ASP.NET Core 10 Security for Minimal APIs with Built-In Security Enhancements  Why ASP.NET Core Identity's Built-in API Endpoints? Starting with .NET 8, ASP.NET Core Identity ships a set of ready-made Minimal API endpoints for authentication. Instead of hand-rolling /register , /login , /refresh-token , and email-confirmation logic, you can call three simple extension methods: AddIdentityApiEndpoints<TUser>() — This registers Identity's services configured for API scenarios (no cookies/redirects, JSON responses). .AddEntityFrameworkStores<TDbContext>() — This tells Identity to persist users, roles, and tokens using Entity Framework Core. app.MapIdentityApi<TUser>() — This maps the actual HTTP routes (register, login, refresh, confirmEmail, resendConfirmationEmail, forgotPassword, resetPassword, manage/info, manage/2fa) onto your route group. Combined with Bearer tokens  instead of cookies, this offfer...