Professional ASP.NET MVC 5

FOREWORD xxvii INTRODUCTION xxix CHAPTER 1: GETTING STARTED 1 A Quick Introduction to ASP.NET MVC 1 How ASP.NET MVC Fits in with ASP.NET 2 The MVC Pattern 2 MVC as Applied to Web Frameworks 3 The Road to MVC 5 3 MVC 4 Overview 6 Open-Source Release 10 ASP.NET MVC 5 Overview 11 One ASP.NET 11 New Web Project Experience 12 ASP.NET Identity 12 Bootstrap Templates 13 Attribute Routing 14 ASP.NET Scaffolding 14 Authentication Filters 15 Filter Overrides 15 Installing MVC 5 and Creating Applications 16 Software Requirements for ASP.NET MVC 5 16 Installing ASP.NET MVC 5 16 Creating an ASP.NET MVC 5 Application 17 The New ASP.NET Project Dialog 18 The MVC Application Structure 24 ASP.NET MVC and Conventions 27 Convention over Configuration 28 Conventions Simplify Communication 29 Summary 29 CHAPTER 2: CONTROLLERS 31 The Controller's Role 31 A Sample Application: The MVC Music Store 34 Controller Basics 38 A Simple Example: The Home Controller 39 Writing Your First Controller 42 Parameters in Controller Actions 45 Summary 47 CHAPTER 3: VIEWS 49 The Purpose of Views 50 View Basics 50 Understanding View Conventions 54 Strongly Typed Views 55 How ViewBag Falls Short 55 Understanding ViewBag, ViewData, and ViewDataDictionary 57 View Models 58 Adding a View 60 The Razor View Engine 63 What Is Razor? 63 Code Expressions 64 HTML Encoding 66 Code Blocks 68 Razor Syntax Samples 68 Layouts 70 ViewStart 72 Specifying a Partial View 73 Summary 74 CHAPTER 4: MODELS 75 Modeling the Music Store 76 Scaffolding a Store Manager 80 What Is Scaffolding? 80 Scaffolding and the Entity Framework 82 Executing the Scaffolding Template 85 Executing the Scaffolded Code 92 Editing an Album 97 Building a Resource to Edit an Album 97 Responding to the Edit POST Request 101 Model Binding 103 The DefaultModelBinder 104 Explicit Model Binding 105 Summary 107 CHAPTER 5: FORMS AND HTML HELPERS 109 Using Forms 110 The Action and the Method 110 To GET or to POST? 111 HTML Helpers 114 Automatic Encoding 115 Making Helpers Do Your Bidding 115 Inside HTML Helpers 116 Setting Up the Album Edit Form 117 Adding Inputs 118 Helpers, Models, and View Data 124 Strongly Typed Helpers 126 Helpers and Model Metadata 127 Templated Helpers 127 Helpers and ModelState 128 Other Input Helpers 129 Html.Hidden 129 Html.Password 129 Html.RadioButton 129 Html.CheckBox 130 Rendering Helpers 130 Html.ActionLink and Html.RouteLink 131 URL Helpers 132 Html.Partial and Html.RenderPartial 133 Html.Action and Html.RenderAction 133 Summary 135 CHAPTER 6: DATA ANNOTATIONS AND VALIDATION 137 Annotating Orders for Validation 138 Using Validation Annotations 141 Custom Error Messages and Localization 146 Looking Behind the Annotation Curtain 147 Controller Actions and Validation Errors 148 Custom Validation Logic 150 Custom Annotations 150 IValidatableObject 154 Display and Edit Annotations 155 Display 155 ScaffoldColumn 156 DisplayFormat 156 ReadOnly 157 DataType 157 UIHint 158 HiddenInput 158 Summary 158 CHAPTER 7: MEMBERSHIP, AUTHORIZATION, AND SECURITY 159 Security: Not fun, But Incredibly Important 159 Using the Authorize Attribute to Require Login 162 Securing Controller Actions 162 How AuthorizeAttribute Works with Forms Authentication and the AccountController 167 Windows Authentication 169 Using AuthorizeAttribute to Require Role Membership 172 Extending User Identity 174 Storing additional user profile data 174 Persistance control 174 Managing users and roles 175 External Login via OAuth and OpenID 175 Registering External Login Providers 176 Configuring OpenID Providers 178 Configuring OAuth Providers 180 Security Implications of External Logins 181 Understanding the Security Vectors in a Web Application 182 Threat: Cross-Site Scripting 183 Threat: Cross-Site Request Forgery 193 Threat: Cookie Stealing 197 Threat: Over-Posting 200 Threat: Open Redirection 202 Proper Error Reporting and the Stack Trace 207 Using Configuration Transforms 208 Using Retail Deployment Configuration in Production 209 Using a Dedicated Error Logging System 209 Security Recap and Helpful Resources 209 Summary 211 CHAPTER 8: AJAX 213 jQuery 214 jQuery Features 214 Unobtrusive JavaScript 218 Using jQuery 219 Ajax Helpers 225 Adding the Unobtrusive Ajax Script to Your Project 225 Ajax ActionLinks 226 HTML 5 Attributes 230 Ajax Forms 230 Client Validation 233 jQuery Validation 233 Custom Validation 236 Beyond Helpers 241 jQuery UI 242 Autocomplete with jQuery UI 243 JSON and Client-Side Templates 246 Bootstrap Plugins 251 Improving Ajax Performance 253 Using Content Delivery Networks 253 Script Optimizations 253 Bundling and Minification 254 Summary 255 CHAPTER 9: ROUTING 257 Uniform Resource Locators 258 Introduction to Routing 259 Comparing Routing to URL Rewriting 259 Routing Approaches 260 Defining Attribute Routes 260 Defining Traditional Routes 271 Choosing Attribute Routes or Traditional Routes 280 Named Routes 280 MVC Areas 282 Catch-All Parameter 284 Multiple Route Parameters in a Segment 285 StopRoutingHandler and IgnoreRoute 286 Debugging Routes 286 Inside Routing: How Routes Generate URLs 288 High-Level View of URL Generation 288 A Detailed Look at URL Generation 289 Ambient Route Values 291 More Examples of URL Generation with the Route Class 293 Inside Routing: How Routes Tie Your URL to an Action 294 The High-Level Request Routing Pipeline 294 RouteData 295 Custom Route Constraints 295 Using Routing with Web Forms 296 Summary 297 CHAPTER 10: NUGET 299 Introduction to NuGet 299 Adding a Library as a Package 301 Finding Packages 301 Installing a Package 303 Updating a Package 308 Package Restore 308 Using the Package Manager Console 309 Creating Packages 312 Packaging a Project 313 Packaging a Folder 313 Configuration File and Source Code Transformations 314 NuSpec File 315 Metadata 316 Dependencies 317 Specifying Files to Include 318 Tools 319 Framework and Profile Targeting 322 Prerelease Packages 324 Publishing Packages 325 Publishing to NuGet.org 325 Using NuGet.exe 327 Using the Package Explorer 330 Summary 332 CHAPTER 11: ASP.NET WEB API 333 Defining ASP.NET Web API 334 Getting Started with Web API 335 Writing an API Controller 335 Examining the Sample ValuesController 335 Async by Design: IHttpController 336 Incoming Action Parameters 340 Action Return Values, Errors, and Asynchrony 340 Configuring Web API 342 Configuration in Web-Hosted Web API 343 Configuration in Self-Hosted Web API 343 Adding Routes to Your Web API 346 Binding Parameters 347 Filtering Requests 349 Enabling Dependency Injection 350 Exploring APIs Programmatically 350 Tracing the Application 352 Web API Example: ProductsController 352 Summary 354 CHAPTER 12: SINGLE PAGE APPLICATIONS WITH ANGULARJS 355 Understanding and Setting Up AngularJS 356 What's AngularJS? 356 Your Goal in This Chapter 356 Getting Started 357 Adding AngularJS to the Site 359 Setting Up the Database 361 Building the Web API 363 Building Applications and Modules 364 Creating Controllers, Models, and Views 365 Services 368 Routing 371 Details View 373 A Custom MovieService 375 Deleting Movies 377 Editing and Creating Movies 379 Summary 384 CHAPTER 13: DEPENDENCY INJECTION 385 Software Design Patterns 385 Design Pattern: Inversion of Control 386 Design Pattern: Service Locator 388 Design Pattern: Dependency Injection 392 Dependency Resolution in MVC 395 Singly Registered Services in MVC 397 Multiply Registered Services in MVC 397 Arbitrary Objects in MVC 399 Dependency Resolution in Web API 402 Singly Registered Services in Web API 402 Multiply Registered Services in Web API 403 Arbitrary Objects in Web API 405 Dependency Resolvers in MVC vs. Web API 405 Summary 405 CHAPTER 14: UNIT TESTING 407 Understanding Unit Testing and Test-Driven Development 408 Defining Unit Testing 408 Defining Test-Driven Development 410 Building a Unit Test Project 412 Examining the Default Unit Tests 413 Test Only the Code You Write 415 Advice for Unit Testing Your ASP.NET MVC and ASP.NET Web API Applications 415 Testing Controllers 416 Testing Routes 420 Testing Validators 423 Summary 427 CHAPTER 15: EXTENDING MVC 429 Extending Models 430 Turning Request Data into Models 430 Describing Models with Metadata 436 Validating Models 438 Extending Views 442 Customizing View Engines 442 Writing HTML Helpers 444 Writing Razor Helpers 445 Extending Controllers 446 Selecting Actions 446 Filters 447 Providing Custom Results 457 Summary 458 CHAPTER 16: ADVANCED TOPICS 461 Mobile Support 461 Adaptive Rendering 462 Display Modes 470 Advanced Razor 473 Templated Razor Delegates 473 Advanced View Engines 476 Configuring a View Engine 477 Finding a View 478 The View Itself 479 Alternative View Engines 480 New View Engine or New ActionResult? 482 Advanced Scaffolding 482 Introducing ASP.NET Scaffolding 482 Customizing Scaffold Templates 483 Custom Scaffolders 485 Advanced Routing 486 RouteMagic 486 Editable Routes 487 Advanced Templates 492 The Default Templates 492 Custom Templates 496 Advanced Controllers 498 Defining the Controller: The IController Interface 498 The ControllerBase Abstract Base Class 499 The Controller Class and Actions 500 Action Methods 502 The ActionResult 502 Action Invoker 511 Using Asynchronous Controller Actions 515 Summary 520 CHAPTER 17: REAL-WORLD ASP.NET MVC: BUILDING THE NUGET.ORG WEBSITE 521 May the Source Be with You 522 WebActivator 526 ASP.NET Dynamic Data 527 Exception Logging 530 Profiling 532 Data Access 535 EF Code-Based Migrations 536 Deployments with Octopus Deploy 539 Automated Browser Testing with Fluent Automation 540 Other Useful NuGet Packages 541 WebBackgrounder 541 Lucene.NET 542 AnglicanGeek.MarkdownMailer 543 Ninject 543 Summary 544 APPENDIX: ASP.NET MVC 5.1 545 ASP.NET MVC 5.1 Release Description 545 Getting MVC 5.1 546 Upgrading MVC 5 Projects from MVC 5.1 546 Upgrading an MVC 5 Application to 5.1 547 Enum Support in ASP.NET MVC Views 549 Attribute Routing with Custom Constraints 553 Route Constraints in Attribute Routing 554 ASP.NET MVC 5.1 Example: Adding a Custom LocaleRoute 554 Bootstrap and JavaScript Enhancements 558 EditorFor Now Supports Passing HTML Attributes 558 Client-Side Validation for MinLength and MaxLength 561 Three Small but Useful Fixes to MVC Ajax Support 562 Summary 563 INDEX 565