Jimmy Bogard

MediatR 12.0 Released

This is a pretty big release, with a number of breaking changes. Release NotesMigration GuideBreaking changes include: Depending directly on IServiceProvider to resolve servicesMaking "void" request handlers return Task instead of UnitIRequest does not inherit IRequest<Unit> instead IBaseRequestConsolidating the MediatR.Extensions.

Azure

Securing Web APIs with Azure AD: Connecting Azure Clients

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the last post, we used OAuth 2.0 Client Credentials flow to connect an external client (modeling our on-prem scenario). We can use

Azure

Securing Web APIs with Azure AD: Connecting External Clients

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the previous post, we looked at enabling local development by creating an Azure AD Group, assigning our user (me) to that group, and

Azure

Securing Web APIs with Azure AD: Enabling Local Development

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the last post, we looked at creating the server application and corresponding Azure resources to secure it. If we try to test our

Azure

Securing Web APIs with Azure AD: Building the Server

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the last couple of posts, we looked at authentication and authorization options and picked some strategies for each. With those pieces chosen, we

Azure

Securing Web APIs with Azure AD: Authorizing Client Applications

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In our last post, we chose the OAuth 2.0 Client Credentials grant scheme to authenticate our APIs and daemon applications: API and daemon

Azure

Securing Web APIs with Azure AD: Designing Authentication Schemes

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In our last post, I walked through my real-world scenario of needing to follow Zero Trust principles in securing microservice-based APIs inside (and outside)

Azure

Securing Web APIs with Azure AD: A Case Study

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example Recently, I was on a project where the company had a big push towards a "Zero Trust" security model. This concept was new to

Azure

Building Messaging Endpoints in Azure: Container Apps

Posts in this series: Evaluating the LandscapeA Generic HostAzure WebJobsAzure Container InstancesAzure FunctionsAzure Container AppsWell it's been a while since we visited this! I intended to follow up with a post on Kubernetes but to be honest, Kubernetes is far too complicated to get

MediatR

You Probably Don't Need to Worry About MediatR

I've been pointed at this post from various sources, and I thought I'd take the time to address the criticisms one by one. Not because I personally care too much, MediatR evolved over many years to solve the problems my teams faced, but since

AutoMapper

Dissecting AutoMapper Programming Horror

My AutoMapper search alerts brought me this gem this morning: Hey... let's use automapper to generate passwords. This post illustrates basically all the wrong reasons to use AutoMapper. Here's the code minus the unimportant bits: public class RequestProfile : Profile { public RequestProfile() { CreateMap<Request,

NServiceBus

NServiceBus.Extensions.Diagnostics 2.1 Released

From the previous post on building NServiceBus metrics, I've pushed a new version of the NServiceBus.Extensions.Diagnostics and OpenTelemetry packages: NServiceBus.Extensions.Diagnostics NuGetNServiceBus.Extensions.Diagnostics ReadMeNServiceBus.Extensions.Diagnostics.OpenTelemetry NuGetNServiceBus.Extensions.Diagnostics.OpenTelemetry ReadMeAs before, the OpenTelemetry packages are just small wrappers

Distributed Systems

Building NServiceBus Metrics with OpenTelemetry and System.Diagnostics.Metrics

The release of System.Diagnostics.DiagnosticSource version 6.0 a few months back brought something entirely new to the library - support for OpenTelemetry Metrics. Since this package releases out-of-band from the .NET 6 SDK, it also means you can use these new metrics

Microservices

Activity Enrichment in ASP.NET Core 6.0

Waaaaay back in the ASP.NET Core 3.1 days, I wrote about increasing the cardinality of traces using Tags and Baggage. You could write code in your controllers, filters, or application code to be able to add custom information to traces to help

NServiceBus.Extensions.Diagnostics 2.0 Released

Last week I pushed out the 2.0 release of NServiceBus.Extensions.Diagnostics package: NuGetRelease NotesAnd related packages: NServiceBus.Extensions.Diagnostics.OpenTelemetryNServiceBus.Extensions.IntegrationTestingThe biggest feature change was to allow behaviors to be able to modify the original activity started by accessing an ICurrentActivity

MediatR

Diagnosing and Fixing MediatR Container Issues

An issue I see come up quite frequently, much to the chagrin of DI container maintainers, are problems of complex generics edge cases and how they come up in MediatR. In fact, more than one container author has demanded some kind of recompense for

OSS

Respawn 5.0 Released

I pushed out a new version of Respawn today: Release notesNuGetEnjoy!

Design Patterns

Service Locator is not an Anti-Pattern

Well, it is, sometimes. It depends. I often get pushback on MediatR for using service location for resolving handlers, often getting pointed at Mark Seemann's post that Service Locator is an Anti-Pattern. And for all of the examples in the post, I agree that

Contoso University Vertical Slice example updated to .NET 6

As the title states, I updated the Vertical Slice example from .NET 5 to 6, migrating away from Startup, updating packages and in general updating to C# 10: Contoso University - Vertical Slices Enjoy!

MediatR

MediatR 10.0 Released

MediatR 10.0.0 released today: Release notesMigration GuideMediatR.Extensions.Microsoft.DependencyInjection release notesNuGetThis release adds support for IAsyncEnumerable<T> with separate types for this separate kind of request/response: IStreamRequest<TResponse>IStreamRequestHandler<in TRequest, TResponse>IStreamPipelineBehavior<

AutoMapper

AutoMapper 11.0.0 released

As the title says, I pushed AutoMapper 11.0.0 today: Release notesNuGet11.0 Upgrade GuideThis is somewhat of a minor release but some API changes forced a major version bump. Also, starting with this version, AutoMapper drops support for full .NET framework, as

Domain Driven Design

Domain-Driven Refactoring: Encapsulating Collections

Posts in this series: IntroProcedural BeginningsLong MethodsExtracting Domain ServicesDefactoring and Pushing Behavior DownEncapsulating DataEncapsulating CollectionsIn the last post, we looked at refactoring our domain model so that we have explicit entry points in order to mutate our domain object. I skipped one of members

Domain Driven Design

Domain-Driven Refactoring: Encapsulating Data

Posts in this series: IntroProcedural BeginningsLong MethodsExtracting Domain ServicesDefactoring and Pushing Behavior DownEncapsulating DataEncapsulating CollectionsIn the last post, we looked at using a few common refactorings to encapsulate operations and push behavior down into our domain model. While this works to encapsulate operations, we

Domain Driven Design

Domain-Driven Refactoring: Defactoring and Pushing Behavior Down

Posts in this series: IntroProcedural BeginningsLong MethodsExtracting Domain ServicesDefactoring and Pushing Behavior DownEncapsulating DataEncapsulating CollectionsIn the last post, we looked at our procedural handler and pulled behavior out that called to external services into its own domain service. This let our handler become more

Domain Driven Design

Domain-Driven Refactoring: Extracting Domain Services

Posts in this series: IntroProcedural BeginningsLong MethodsExtracting Domain ServicesDefactoring and Pushing Behavior DownEncapsulating DataEncapsulating CollectionsIn my last post, we looked at the Compose Method refactoring as a means of breaking up long methods into smaller ones, each with an equivalent level of granularity. This