Professional ASP.NET MVC 5

FOREWORD xxviiINTRODUCTION xxixCHAPTER 1: GETTING STARTED 1A Quick Introduction to ASP.NET MVC 1How ASP.NET MVC Fits in with ASP.NET 2The MVC Pattern 2MVC as Applied to Web Frameworks 3The Road to MVC 5 3MVC 4 Overview 6Open-Source Release 10ASP.NET MVC 5 Overview 11One ASP.NET 11New Web Project Experience 12ASP.NET Identity 12Bootstrap Templates 13Attribute Routing 14ASP.NET Scaffolding 14Authentication Filters 15Filter Overrides 15Installing MVC 5 and Creating Applications 16Software Requirements for ASP.NET MVC 5 16Installing ASP.NET MVC 5 16Creating an ASP.NET MVC 5 Application 17The New ASP.NET Project Dialog 18The MVC Application Structure 24ASP.NET MVC and Conventions 27Convention over Configuration 28Conventions Simplify Communication 29Summary 29CHAPTER 2: CONTROLLERS 31The Controller's Role 31A Sample Application: The MVC Music Store 34Controller Basics 38A Simple Example: The Home Controller 39Writing Your First Controller 42Parameters in Controller Actions 45Summary 47CHAPTER 3: VIEWS 49The Purpose of Views 50View Basics 50Understanding View Conventions 54Strongly Typed Views 55How ViewBag Falls Short 55Understanding ViewBag, ViewData, and ViewDataDictionary 57View Models 58Adding a View 60The Razor View Engine 63What Is Razor? 63Code Expressions 64HTML Encoding 66Code Blocks 68Razor Syntax Samples 68Layouts 70ViewStart 72Specifying a Partial View 73Summary 74CHAPTER 4: MODELS 75Modeling the Music Store 76Scaffolding a Store Manager 80What Is Scaffolding? 80Scaffolding and the Entity Framework 82Executing the Scaffolding Template 85Executing the Scaffolded Code 92Editing an Album 97Building a Resource to Edit an Album 97Responding to the Edit POST Request 101Model Binding 103The DefaultModelBinder 104Explicit Model Binding 105Summary 107CHAPTER 5: FORMS AND HTML HELPERS 109Using Forms 110The Action and the Method 110To GET or to POST? 111HTML Helpers 114Automatic Encoding 115Making Helpers Do Your Bidding 115Inside HTML Helpers 116Setting Up the Album Edit Form 117Adding Inputs 118Helpers, Models, and View Data 124Strongly Typed Helpers 126Helpers and Model Metadata 127Templated Helpers 127Helpers and ModelState 128Other Input Helpers 129Html.Hidden 129Html.Password 129Html.RadioButton 129Html.CheckBox 130Rendering Helpers 130Html.ActionLink and Html.RouteLink 131URL Helpers 132Html.Partial and Html.RenderPartial 133Html.Action and Html.RenderAction 133Summary 135CHAPTER 6: DATA ANNOTATIONS AND VALIDATION 137Annotating Orders for Validation 138Using Validation Annotations 141Custom Error Messages and Localization 146Looking Behind the Annotation Curtain 147Controller Actions and Validation Errors 148Custom Validation Logic 150Custom Annotations 150IValidatableObject 154Display and Edit Annotations 155Display 155ScaffoldColumn 156DisplayFormat 156ReadOnly 157DataType 157UIHint 158HiddenInput 158Summary 158CHAPTER 7: MEMBERSHIP, AUTHORIZATION, AND SECURITY 159Security: Not fun, But Incredibly Important 159Using the Authorize Attribute to Require Login 162Securing Controller Actions 162How AuthorizeAttribute Works with Forms Authentication and the AccountController 167Windows Authentication 169Using AuthorizeAttribute to Require Role Membership 172Extending User Identity 174Storing additional user profile data 174Persistance control 174Managing users and roles 175External Login via OAuth and OpenID 175Registering External Login Providers 176Configuring OpenID Providers 178Configuring OAuth Providers 180Security Implications of External Logins 181Understanding the Security Vectors in a Web Application 182Threat: Cross-Site Scripting 183Threat: Cross-Site Request Forgery 193Threat: Cookie Stealing 197Threat: Over-Posting 200Threat: Open Redirection 202Proper Error Reporting and the Stack Trace 207Using Configuration Transforms 208Using Retail Deployment Configuration in Production 209Using a Dedicated Error Logging System 209Security Recap and Helpful Resources 209Summary 211CHAPTER 8: AJAX 213jQuery 214jQuery Features 214Unobtrusive JavaScript 218Using jQuery 219Ajax Helpers 225Adding the Unobtrusive Ajax Script to Your Project 225Ajax ActionLinks 226HTML 5 Attributes 230Ajax Forms 230Client Validation 233jQuery Validation 233Custom Validation 236Beyond Helpers 241jQuery UI 242Autocomplete with jQuery UI 243JSON and Client-Side Templates 246Bootstrap Plugins 251Improving Ajax Performance 253Using Content Delivery Networks 253Script Optimizations 253Bundling and Minification 254Summary 255CHAPTER 9: ROUTING 257Uniform Resource Locators 258Introduction to Routing 259Comparing Routing to URL Rewriting 259Routing Approaches 260Defining Attribute Routes 260Defining Traditional Routes 271Choosing Attribute Routes or Traditional Routes 280Named Routes 280MVC Areas 282Catch-All Parameter 284Multiple Route Parameters in a Segment 285StopRoutingHandler and IgnoreRoute 286Debugging Routes 286Inside Routing: How Routes Generate URLs 288High-Level View of URL Generation 288A Detailed Look at URL Generation 289Ambient Route Values 291More Examples of URL Generation with the Route Class 293Inside Routing: How Routes Tie Your URL to an Action 294The High-Level Request Routing Pipeline 294RouteData 295Custom Route Constraints 295Using Routing with Web Forms 296Summary 297CHAPTER 10: NUGET 299Introduction to NuGet 299Adding a Library as a Package 301Finding Packages 301Installing a Package 303Updating a Package 308Package Restore 308Using the Package Manager Console 309Creating Packages 312Packaging a Project 313Packaging a Folder 313Configuration File and Source Code Transformations 314NuSpec File 315Metadata 316Dependencies 317Specifying Files to Include 318Tools 319Framework and Profile Targeting 322Prerelease Packages 324Publishing Packages 325Publishing to NuGet.org 325Using NuGet.exe 327Using the Package Explorer 330Summary 332CHAPTER 11: ASP.NET WEB API 333Defining ASP.NET Web API 334Getting Started with Web API 335Writing an API Controller 335Examining the Sample ValuesController 335Async by Design: IHttpController 336Incoming Action Parameters 340Action Return Values, Errors, and Asynchrony 340Configuring Web API 342Configuration in Web-Hosted Web API 343Configuration in Self-Hosted Web API 343Adding Routes to Your Web API 346Binding Parameters 347Filtering Requests 349Enabling Dependency Injection 350Exploring APIs Programmatically 350Tracing the Application 352Web API Example: ProductsController 352Summary 354CHAPTER 12: SINGLE PAGE APPLICATIONS WITH ANGULARJS 355Understanding and Setting Up AngularJS 356What's AngularJS? 356Your Goal in This Chapter 356Getting Started 357Adding AngularJS to the Site 359Setting Up the Database 361Building the Web API 363Building Applications and Modules 364Creating Controllers, Models, and Views 365Services 368Routing 371Details View 373A Custom MovieService 375Deleting Movies 377Editing and Creating Movies 379Summary 384CHAPTER 13: DEPENDENCY INJECTION 385Software Design Patterns 385Design Pattern: Inversion of Control 386Design Pattern: Service Locator 388Design Pattern: Dependency Injection 392Dependency Resolution in MVC 395Singly Registered Services in MVC 397Multiply Registered Services in MVC 397Arbitrary Objects in MVC 399Dependency Resolution in Web API 402Singly Registered Services in Web API 402Multiply Registered Services in Web API 403Arbitrary Objects in Web API 405Dependency Resolvers in MVC vs. Web API 405Summary 405CHAPTER 14: UNIT TESTING 407Understanding Unit Testing and Test-Driven Development 408Defining Unit Testing 408Defining Test-Driven Development 410Building a Unit Test Project 412Examining the Default Unit Tests 413Test Only the Code You Write 415Advice for Unit Testing Your ASP.NET MVCand ASP.NET Web API Applications 415Testing Controllers 416Testing Routes 420Testing Validators 423Summary 427CHAPTER 15: EXTENDING MVC 429Extending Models 430Turning Request Data into Models 430Describing Models with Metadata 436Validating Models 438Extending Views 442Customizing View Engines 442Writing HTML Helpers 444Writing Razor Helpers 445Extending Controllers 446Selecting Actions 446Filters 447Providing Custom Results 457Summary 458CHAPTER 16: ADVANCED TOPICS 461Mobile Support 461Adaptive Rendering 462Display Modes 470Advanced Razor 473Templated Razor Delegates 473Advanced View Engines 476Configuring a View Engine 477Finding a View 478The View Itself 479Alternative View Engines 480New View Engine or New ActionResult? 482Advanced Scaffolding 482Introducing ASP.NET Scaffolding 482Customizing Scaffold Templates 483Custom Scaffolders 485Advanced Routing 486RouteMagic 486Editable Routes 487Advanced Templates 492The Default Templates 492Custom Templates 496Advanced Controllers 498Defining the Controller: The IController Interface 498The ControllerBase Abstract Base Class 499The Controller Class and Actions 500Action Methods 502The ActionResult 502Action Invoker 511Using Asynchronous Controller Actions 515Summary 520CHAPTER 17: REAL-WORLD ASP.NET MVC: BUILDING THE NUGET.ORG WEBSITE 521May the Source Be with You 522WebActivator 526ASP.NET Dynamic Data 527Exception Logging 530Profiling 532Data Access 535EF Code-Based Migrations 536Deployments with Octopus Deploy 539Automated Browser Testing with Fluent Automation 540Other Useful NuGet Packages 541WebBackgrounder 541Lucene.NET 542AnglicanGeek.MarkdownMailer 543Ninject 543Summary 544APPENDIX: ASP.NET MVC 5.1 545ASP.NET MVC 5.1 Release Description 545Getting MVC 5.1 546Upgrading MVC 5 Projects from MVC 5.1 546Upgrading an MVC 5 Application to 5.1 547Enum Support in ASP.NET MVC Views 549Attribute Routing with Custom Constraints 553Route Constraints in Attribute Routing 554ASP.NET MVC 5.1 Example: Adding a Custom LocaleRoute 554Bootstrap and JavaScript Enhancements 558EditorFor Now Supports Passing HTML Attributes 558Client-Side Validation for MinLength and MaxLength 561Three Small but Useful Fixes to MVC Ajax Support 562Summary 563INDEX 565