Ahmad Ibrahim

#dotnet #efcore #aspnetcore

[Miguel de Icaza ᯅ🍉 @migueldeicaza]

The Israeli genocide against the Palestinians continues without pause:

[Bytebytego @bytebytego]

How to design a 𝐬𝐞𝐜𝐮𝐫𝐞 web API access for your website?

When we open web API access to users, we need to make sure each API call is authenticated. This means the user must be whom they claim to be.

In this post, we explore two common ways:
1. Token based authentication
2. HMAC (Hash-based Message Authentication Code) authentication

The diagram below illustrates how they work.

𝐓𝐨𝐤𝐞𝐧 𝐛𝐚𝐬𝐞𝐝
Step 1 - the user enters their password into the client, and the client sends the password to the Authentication Server.

Step 2 - the Authentication Server authenticates the credentials and generates a token with an expiry time.

Steps 3 and 4 - now the client can send requests to access server resources with the token in the HTTP header. This access is valid until the token expires.

𝐇𝐌𝐀𝐂 𝐛𝐚𝐬𝐞𝐝
This mechanism generates a Message Authentication Code (signature) by using a hash function (SHA256 or MD5).

Steps 1 and 2 - the server generates two keys, one is Public APP ID (public key) and the other one is API Key (private key).
Step 3 - we now generate a HMAC signature on the client side (hmac A). This signature is generated with a set of attributes listed in the diagram.

Step 4 - the client sends requests to access server resources with hmac A in the HTTP header.

Step 5 - the server receives the request which contains the request data and the authentication header. It extracts the necessary attributes from the request and uses the API key that’s stored on the server side to generate a signature (hmac B.)

Steps 6 and 7 - the server compares hmac A (generated on the client side) and hmac B (generated on the server side). If they are matched, the requested resource will be returned to the client.

Question - How does HMAC authentication ensure data integrity? Why do we include “request timestamp” in HMAC signature generation?

--
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/eVEdOFSYPY

[Ahmad Ibrahim @dym6100]

Have you ever faced issues because "Path.GetExtension" doesn’t return the actual extension that Windows APIs deal with due to path normalization differences?

#dotnet #csharp

[Islam Mahfouz @codezilla_]

@patrickc Here you go everyone

[Karen Payne MVP @KarenPayneMVP]

Need to validate a json string in code, add language=json as a comment.

[Ahmad Ibrahim @dym6100]

@RickStrahl Here they just suppress the warning.
https://t.co/V2kpfxk2RO

[Dave Callan | dotnet @Dave_DotNet]

Entity Framework SQL Query Plan Visualizer 👏🏻

The EFCore.Visualizer Visual Studio extension looks like it could be a game changer.

It allows us to view the query plan of our SQL queries directly inside VS.

Will you try it?

#dotnet

[David Fowler @davidfowl]

Non-allocating split finally coming in .NET 9

#dotnet

[Dave Callan | dotnet @Dave_DotNet]

C# Access Modifiers summary table

I got this summary table from MS learn.
It's definitely worth a bookmark.

Note the file access modifier is new from C# 11.

#dotnet

[Miguel de Icaza ᯅ🍉 @migueldeicaza]

Part 37 of a broken society:

[Miguel de Icaza ᯅ🍉 @migueldeicaza]

Part 36, not in Gaza, not in the West Bank, Israel:

[Miguel de Icaza ᯅ🍉 @migueldeicaza]

These people are not well:

[David McCarter (Microsoft MVP) @realDotNetDave]

We need more articles and videos on how to create source generators for .NET! #dotnet

[Stefan Đokić | .NET @TheCodeMan__]

How to implement jobs in .NET?

Did you hear about Hangfire?

Let's learn something 👇

Hangfire is an open-source library for .NET that provides a simple way to perform background processing in your application.

It allows you to run jobs (methods or functions) asynchronously and schedule them to run at a specific time or regularly.

Background job types:

• 𝗙𝗶𝗿𝗲-𝗮𝗻𝗱-𝗳𝗼𝗿𝗴𝗲𝘁

These are jobs that are executed once and then forgotten. They are used for tasks that need to be performed in the background, but the result doesn't need to be returned to the application immediately.

• 𝗗𝗲𝗹𝗮𝘆𝗲𝗱 𝗷𝗼����𝘀

These are jobs that are scheduled to run at a specific time in the future. You can use them to schedule tasks that need to be performed at a specific time, such as sending a reminder email to a user.

• 𝗥𝗲𝗰𝘂𝗿𝗿𝗶𝗻𝗴 𝗷𝗼𝗯𝘀

These are jobs that are scheduled to run repeatedly at a specified interval. You can use them to automate tasks that need to be performed regularly, such as generating reports or performing database cleanup.

• 𝗖𝗼𝗻𝘁𝗶𝗻𝘂𝗮𝘁𝗶𝗼𝗻𝘀

These are jobs that are executed after a previous job has been completed. You can use them to create a sequence of jobs that need to be performed in a specific order.

𝗪𝗵𝘆 𝗜'𝗺 𝘂𝘀𝗶𝗻𝗴 𝗛𝗮𝗻𝗴𝗳𝗶𝗿𝗲?

Simplicity - With just a few lines of code, you can configure it to run background jobs, schedule tasks to run at a specific time or repeatedly, and monitor the progress of those tasks.

Read more here: https://t.co/7Xk1zo1uMO

Did you use it already? 📝
____

Transform your API development process with Postman Flows! Experience a new way to visually create, debug, and automate complex API workflows with ease. Dive into the future of API management and enhance your productivity https://t.co/eqQDSsM5Gl.

#Dotnet

[ترجمات @trjmatcom]

ازدواجية المعايير في تسمية أهم الاكتشافات والمعادلات الرياضية تيمنًا بعلماء الغرب مقارنة بعلماء المسلمين

[Mahmoud Youssef @mahyoussef_]

أي حد يقدر يكتب وينشر مقاله في اقرأ-تِك من دلوقتي 🚀

لو عندكوا مجموعة من المقالات اللي كنتوا كاتبينها قبل كده باللغة العربية في أي موضوع متعلق او مرتبط بهندسة البرمجيات , او حابين تكتبوا مقالات وتتنشر على منصة اقرأ-تِك باسمكوا وتكون متاحة للجميع بشكل مجاني تمامًا فكل ده باه متاح دلوقتي 😍

نفسنا نوصل لمرحلة ان يكون عندنا مكان واحد الناس يقدروا يدخلوا من خلاله ويقرأوا كل ما يتعلق بهندسة البرمجيات باللغة العربية بدل التشتت بين السوشيال ميديا 💁‍♂️

عملنا صفحة جديدة في اقرأ-تِك فيها كل التفاصيل اللي حابين تعرفوها زي :
��� سياسة استقبال المقالات
🔸 المعايير العامة لكتابة ونشر المقالات عشان نوحد شكل وجودة المقالات
🔸كيفية الإرسال
🔸التزامات اقرأ-تِك تجاه الكتاب

رابط الصفحة 👇
https://t.co/NC46avbiQV

حرصًا مننا أننا نبني مجتمع عربي بيشجع على القراءة والتعلم ومشاركة التجارب والخبرات فتقدروا دلوقتي تنضموا لينا في تحقيق رؤيتنا وتكتبوا معانا 🌟

[devleader @DevLeaderCa]

You've no doubt seen this keyword in CSharp code...

Read more in this post:
https://t.co/wQnJiEPHrW

#csharp #dotnet #dotnetcore #coding

[Sergio Pedri @SergioPedri]

There's a small new little feature in C# 12 that I think most didn't notice. You can now declare empty class, record and interface types without specifying a body at all, just with a semicolon token. It's not even called out in the docs, I should go update them 😄
#csharp #dotnet

[Dave Callan | dotnet @Dave_DotNet]

Entity Framework AsSplitQuery benchmark

If you are doing a lot of Includes() with your LINQ queries consider benchmarking AsSplitQuery to force EF to send separate queries and then join the data back together on the client side.

#dotnet

[Dave Callan | dotnet @Dave_DotNet]

Built-in OpenAPI doc generation in .NET 9 ❤

ASP .NET Preview 4 will have OpenAPI doc generation capabilities. Swashbuckle is awesome but it's nice to have this built in now.

What do you think?

#dotnet