ASP.NET Security, EF Core, and Polly Resilience
Covers PKCE, passkeys, JWT refresh tokens, Native AOT, EF Core caching and N+1 fixes, plus Polly, OpenTelemetry, RabbitMQ, and Channels.
Jasen's top three picks
- 1 Authorization Code + PKCE in .NET 10: Securing Angular, Gateway, and Downstream APIs
c-sharpcorner.com
A solid end-to-end auth flow that ties SPA, gateway, and downstream APIs together instead of treating them as separate security problems.
- 2 Building Asynchronous Messaging Pipelines with MassTransit and RabbitMQ
c-sharpcorner.com
Good practical messaging piece for teams moving beyond synchronous HTTP and needing durability under load.
- 3 Building AI-Ready APIs with Structured Output Validation in ASP.NET Core
c-sharpcorner.com
Structured output validation is quickly becoming table stakes for AI endpoints; useful if you're tired of brittle JSON contracts.
Editor's note
I kept this one deliberately mixed, which is how I like the newsletter best. The PKCE walkthrough for Angular, gateway, and downstream APIs stood out because it connects browser and API security cleanly, and the EF Core pieces on N+1s and second-level caching are the kind of practical performance work teams actually wrestle with. I also liked the pairing of Polly resilience guidance with the thread-pool starvation diagnostics article since reliability problems rarely show up in isolation.
Today's articles
Authorization Code + PKCE in .NET 10: Securing Angular, Gateway, and Downstream APIs
c-sharpcorner.com
Secure Angular & .NET 10 apps with Auth Code + PKCE. Protects SPAs, Gateways, and APIs for robust enterprise security.
Topics: Authentication Authorization .NET 10
Read article
Building Asynchronous Messaging Pipelines with MassTransit and RabbitMQ
c-sharpcorner.com
Build resilient, event-driven .NET apps with MassTransit & RabbitMQ. Decouple services, handle spikes, and ensure fault tolerance for high concurrency.
Topics: ASP.NET Core RabbitMQ
Read articleBuilding AI-Ready APIs with Structured Output Validation in ASP.NET Core
c-sharpcorner.com
Build robust AI-powered APIs in ASP.NET Core with structured output validation. Ensure reliable data integration and prevent downstream errors.
Topics: ASP.NET Core OpenAI Web API
Read article
ASP.NET Core REST API Development Guide
faciletechnolab.com
A practical guide to building REST APIs with ASP.NET Core — routing, controllers, versioning, authentication, validation, error handling, and OpenAPI docs.
Topics: ASP.NET Core REST API Web API
Read article
Implementing AI Memory in .NET Applications Using Semantic Kernel
c-sharpcorner.com
Unlock AI memory in .NET with Semantic Kernel. Learn about types, stores, and best practices for context-aware applications.
Topics: C# OpenAI Semantic Kernel
Read article
Building Resilient HTTP Clients with Polly v9 and .NET 11
c-sharpcorner.com
Build resilient .NET 11 HTTP clients with Polly v9. Master retry, timeout, and circuit breaker patterns for reliable service communication.
Topics: ASP.NET Core .NET 10 Performance
Read article
Microservices with .NET: Architecture Patterns for Enterprise Teams
medium.com
ASP.NET Application Development Services teams building enterprise platforms in 2026 face a recurring question: when does a monolith stop…
Topics: ASP.NET Core Clean Architecture Design Patterns
Read article
ASP.NET Community Standup: What's new in .NET 11 Preview 7?
youtube.com
Join the ASP.NET Core team for a tour of what's new for ASP.NET Core and Blazor in .NET 11 Preview 7: Output caching for Blazor, QuickGrid virtualization improvements, auto-pausing Blazor Server circu...
Topics: ASP.NET Core Blazor .NET 10
Read article
Benchmarking .NET Native AOT for High-Traffic REST APIs
c-sharpcorner.com
Explore .NET Native AOT for high-traffic REST APIs. Benchmark startup, latency, throughput, and memory for optimal performance.
Topics: Benchmarking Native AOT Performance
Read article
Relational Where It Helps, JSONB Where It Must: Persisting IIIF Presentation 3 in PostgreSQL with…
ahmadminoo.medium.com
A proof of concept using the real IIIF Manifest object model, EF Core owned entities, Razor Pages, PostgreSQL, and careful JSONB
Topics: ASP.NET Core EF Core PostgreSQL
Read article
What Autofac and Scrutor Are Still For
medium.com
Every .NET release swallows another reason to install a container. Here’s what’s left for Scrutor, and what still needs Autofac.
Topics: ASP.NET Core Clean Architecture Design Patterns
Read article
Mastering Async Concurrency in Enterprise AI: gather vs as_completed vs TaskGroup in LangGraph
c-sharpcorner.com
Master async Python for enterprise AI: gather, as_completed, TaskGroup in LangGraph for efficient ML inference and multi-agent concurrency.
Topics: C# OpenAI Performance
Read article
GPT-5.6 now available in Microsoft Foundry
azure.microsoft.com
Introducing OpenAI's latest frontier model series, the Asia Pacific Data Zone, and product agent capabilities, all generally available in Microsoft Foundry. The post GPT-5.6 now available in Microsoft...
Read article
Is Async/Await Killing Your App’s Performance?
medium.com
For a long time, I used async and await under the assumption that they were a 'magic button' to make my code faster. Continue reading on Deloitte UK Engineering Blog »
Topics: C# Performance
Read articleProduction-Ready OpenTelemetry Metrics in .NET 11
c-sharpcorner.com
Implement production-ready OpenTelemetry metrics in .NET 11. Capture custom business metrics, monitor performance, and ensure reliability.
Topics: .NET 10 OpenTelemetry Performance
Read article
The Boolean Trick No C# Developer Knows About
youtube.com
Learn PostgreSQL for Free at Dometrain: https://dometrain.com/course/hands-on-learn-postgresql/?ref=nick-chapsas&promo=youtube Hello, everybody. I'm Nick, and in this video, I will introduce you to th...
Topics: C#
Read articleLeveraging Built-In Rate Limiting and Output Caching in Modern .NET
c-sharpcorner.com
Boost .NET API performance with built-in rate limiting & output caching. Protect against abuse & reduce database load efficiently.
Topics: ASP.NET Core Performance Web API
Read articleModern authentication in ASP.NET Core with 2FA and passkey
blog.elmah.io
This walkthrough builds a .NET 10 ASP.NET Core Web API (TwoFaNET10) implementing two-factor authentication and WebAuthn/FIDO2 passkey login, using Microsoft.AspNetCore.Identity.EntityFrameworkCore wit...
Topics: ASP.NET Core Authentication Security
Read article
Entity Framework N+1 in a Report Loop: The Pre-Fetch Fix Was Going to Crash Large Tenants
medium.com
he query loop was firing once per row. The obvious fix loaded the entire tenant’s history into memory. Neither was acceptable.
Topics: ASP.NET Core EF Core Performance
Read articleDiagnosing Thread Pool Starvation in ASP.NET Core APIs
c-sharpcorner.com
Diagnose and fix ASP.NET Core API Thread Pool starvation. Learn to identify slow responses caused by blocked threads, not just slow databases.
Topics: ASP.NET Core Performance Profiling
Read article
How I Extended Polly’s Resilience Pipeline with a Custom IOptionsMonitor
medium.com
From feature request to merged PR: exposing a hidden path in Polly’s resilience pipeline.
Topics: ASP.NET Core Performance
Read article
How to Resolve SQL Server Error 40 ("Could Not Open a Connection to SQL Server")
c-sharpcorner.com
Resolve SQL Server Error 40 in ASP.NET Core. Troubleshoot connection issues with Entity Framework Core, connection strings, and configuration.
Topics: ASP.NET Core EF Core SQL Server
Read article
Designing High-Throughput File Processing Pipelines with .NET Channels
c-sharpcorner.com
Design scalable .NET file processing pipelines with Channels. Learn producer-consumer, backpressure, and error handling for high throughput.
Topics: ASP.NET Core C# Performance
Read article
How to Validate Complex Web Forms with a Business Rules Engine
medium.com
The Problem
Topics: ASP.NET Core Design Patterns
Read article
Second-Level Caching in EF Core 10: The Complete Guide
codewithmukesh.com
Add second-level caching to EF Core 10 with EFCoreSecondLevelCacheInterceptor, Redis, and HybridCache - with real benchmarks and the invalidation gotchas.
Topics: EF Core Performance Redis
Read article
Stop Confusing Value Types and Reference Types in C#: Learn It Once and Never Forget It
ajax-workspace.medium.com
Introduction
Topics: C#
Read articleImplementing JWT Authentication with Secure Refresh Tokens in .NET Core
c-sharpcorner.com
Implement secure JWT authentication with refresh tokens in .NET Core. Learn to generate, validate, and refresh tokens for stateless API security.
Topics: Authentication JWT Security
Read articleAutomated Governance and Dynamic Routing in Enterprise LangGraph RAG
c-sharpcorner.com
Automate RAG tool registration and enforce Pydantic schemas in enterprise LangGraph with Python metaclasses for scalable, secure multi-agent AI.
Topics: Design Patterns OpenAI Security
Read article