Preventing fat/bloated/god controllers by following a simple endpoint pattern
I’ve been working with ASP.NET/CORE MVC and WebApi for a while now and there is a problem I often run in to. It’s the case of the fat/bloated/god controller....
Integration Testing an AspNet Core API That is Protected With CSRF/XSRF Tokens
I was working on writing integrations tests for an AspNet Core Web API project recently (I blogged about how to write integration tests here). The front end ...
Upcoming talk @ API Days, Melbourne 2019
I’ll be speaking about some of my Microservices scars at the upcoming API Days conference to be held at Melbourne convention & exhibition centre. My talk...
Speaking @ DDD Melbourne 2019
Last weekend I spoke at @DDDMelbourne and it was my first time doing so. The event attracted close to 900 people and had 5 concurrent tracks. I spoke at the ...
Protecting Assets Without Using Authorization Headers (i.e. Bearer Tokens)
tl;dr; If you want to access an api endpoint but don’t have a way to append the authorization info to your request, you need to create a magic url that is sh...
Setting Up AzureAD Multi-tenant Authentication With ASP NET Core And Angular
Using Azure AD to implement a multi-tenant application is fairly straight forward. It requires turning on a few knobs and switches from the portal and you’re...
A Reply To Waleed Aly’s Article On Sri Lankan Easter Sunday Terrorist Attack
I doubt Waleed Aly will ever get to read this but at least it’s now in the ether. I wanted to apologize for bringing politics into my blog but then it dawned...
Requesting Additional Claims From AzureAD
I am currently working on a project that uses EasyAuth to protect a web app hosted on Azure App Services. Think of it as a layer that operates above your web...
Mediator Pattern Implemented In .NET/C#
The mediator pattern or the “domain whisperer” as I like to call it has been around for a long time and the main selling point of it is the reduction of coup...
OAuth Client Credentials Flow With AzureAD
Navigating through the various authentication and authorization flows in AzureAD can sometimes be confusing. The Microsoft documentation on app types is a go...