Group items tagged

"ASP.NET MVC 3 introduced global filters, which allows you to add the AuthorizeAttribute filter to the global.asax file to protect every action method of every controller. (In MVC versions prior to MVC 3, it was difficult to enforce the AuthorizeAttribute attribute be applied to all methods except login/register. See my previous blog on security for details.) The code below shows how to add the AuthorizeAttribute filter globally."

Using Visual Studio symbols and source files makes debugging much easier. I am specially happy about ASP.NET MVC 2 source files because I develop on ASP.NET MVC 2 almost every day. You may also find other useful symbols and source files. In this posting I will show you how to get ASP.NET MVC source to your computer and how to use it.

"You cannot use routing or web.config files to secure your MVC application. The only supported way to secure your MVC application is to use a base class with an [Authorize] attribute, and then have each controller type subclass that base type. "

"A little while ago I wrote a blog post describing granular request validation that shipped in MVC 3 Beta. However, since then we have changed the API for this feature and that post is no longer valid. In this post I will present the new API which is usable in the recently-shipped MVC 3 Release Candidate."

"Many people on the forums want to know how to best protect Actions on their Controller using Forms Authentication. The MVC Team has done a nice job introducing Filters (using Attributes) to this latest drop of MVC, and in this post I'll show you how to create a filter that can handle security."

One of the things my team has been working on has been a new view engine option for ASP.NET. ASP.NET MVC has always supported the concept of "view engines" - which are the pluggable modules that implement different template syntax options. The "default" view engine for ASP.NET MVC today uses the same .aspx/.ascx/.master file templates as ASP.NET Web Forms. Other popular ASP.NET MVC view engines used today include Spark and NHaml. The new view-engine option we've been working on is optimized around HTML generation using a code-focused templating approach. The codename for this new view engine is "Razor", and we'll be shipping the first public beta of it shortly.

"A lot has been written about how to get ASP.NET MVC running on IIS 6 with extensionless URLs. Up until now, the story hasn't been very pretty. When running ASP.NET MVC on ASP.NET 4, it gets a lot easier."

"In this post I would like to cover a couple of asynchronous patterns that are available in ASP.NET MVC and jQuery as it is used in MVC."

" AsyncController is introduced in ASP.NET MVC 2 while SessionLess controller is introduced in ASP.NET MVC 3. AsyncController allows you to perform long running I/O operation(s) without making your thread idle(i.e., waiting for I/O operations to complete). On the other hand, SessionLess controller allows you to execute multiple requests simultaneously for single user, which otherwise execute multiple requests sequentially due to session synchronization. Understanding these concepts may be easy for you but I have seen a lot of guys become confused on these concepts. In this article, I will show you how to use AsyncController and SessionLess controller in ASP.NET MVC application. I will also compare them and tell you what to use when, where, and the why."

"So you're ready to start that new and ambitious ASP.NET MVC project. Maybe you're kicking off a new startup or just finally moving that old-and-crusty webforms project into modern development world. Either way, here are a few very simple things you can do immediately after creating that new MVC project that you will thank yourself for as your project grows in complexity."

A workaround: ASP.net MVC3: Doesn't Deserialize Nullable Properties from Json

"Let's face it - there are a lot of sites out there now running MVC3, probably mostly using the same patterns. This is a taster of some of the creative ways that this versatile platform is being used."

Applying Uncle Bob's packaging principals to MVC organization

"Naked Objects MVC combines the power of the naked objects pattern with Microsoft's ASP.NET MVC 2 framework. Now you can take a POCO domain object model and turn it into a fully-functional web application in minutes, without writing a single line of user interface code. You can then customise the generic user interface by adding custom style sheets, custom views and custom controllers, following standard ASP.NET patterns."

MVC3 released

A simple but effective mini-profiler for ASP.NET MVC

"TekPub is an interesting study in a company who started on ASP.NET MVC and quickly moved to Ruby on Rails. InfoQ had the opportunity to talk with Rob and James about TekPub and their journey from using ASP.NET MVC to Ruby on Rails."

Quite a thought provoking interview for us .Net veterans.

News site of MVC articles

Thoughts on ASP.NET MVC, ASP.NET Web API, and ASP.NET Web Pages (Razor) open source announcements

ASP.NET MVC 4 Beta and WebAPI