DV DEV Community: #dotnet
RSS

A secure enterprise chat with React, .NET 10 and Microsoft Foundry

The article targets the common mistake of calling the model straight from the front end with the API key in JavaScript, and instead wires React to a .NET 10 Minimal API that talks to Microsoft Foundry without any keys. It walks through Entra ID authentication, a server-owned system prompt, Server-Sent Events streaming and IP-based rate limiting as the protections that separate a demo from a product.

.NET 10 + Pinecone: integrating a vector database

A tutorial that wires .NET 10 into Pinecone, the managed vector database, using HttpClient and the REST data-plane endpoints instead of the archived C# SDK. It covers options binding, DI registration, upsert and similarity query, plus validation that keeps embeddings consistent.

Faking a Yes: 6 Attacks on the Human Confirmation in a .NET 10 MCP Server

A developer red-teamed the confirmation step of a refund MCP server built on ASP.NET Core with the official C# SDK (ModelContextProtocol 2.3.0). Six attacks — plain-JSON requestState, replaying another user's approval, injected form fields and a pre-checked consent box — each led to a concrete server-side defense, plus a checklist you can apply to your own tools.

.NET 8 and 9 End of Support: A Deployment-First Migration Checklist

Microsoft retires .NET 8 and .NET 9 on November 10, 2026, leaving apps without security patches unless they move to .NET 10. A new deployment-first checklist shows how to inventory what is actually running, retarget with minimal risk and prove the migration with artifact-level testing and a rollback rehearsal.

Caliburn.Micro Conventions: How View and ViewModel Are Paired

The third post in a series looks at Caliburn.Micro's conventions: how the framework pairs a View with its ViewModel through naming rules and reflection. It walks through ViewLocator's two-step lookup, the five default regex rules in NameTransformer, and why AssemblySource determines whether a View can be found at all.

Securing APIs with Microsoft Entra ID: scope, client and token validation

A practical guide to protecting an API with Microsoft Entra ID: registering the API, exposing a scope, and registering the client that requests it. It walks through a .NET Core API using Microsoft.Identity.Web, a React client using MSAL, and a .NET web app calling a downstream API. The same token checks apply to any backend stack.

TableSchema and database structure upgrades: compare, plan, execute

This post explains how a .NET ERP framework applies TableSchema definitions to the physical database without migration scripts. Each upgrade compares the live structure with the definition, then separates compare, plan and execute so the mode (ALTER or rebuild) can be checked before running. It is useful for developers who maintain schemas that already hold production data.

Claude Code for .NET Developers: A Practical Agentic Workflow

Claude Code is an agent that reads a repository, plans changes, edits files and runs dotnet build and dotnet test until the code passes. Mehdi Mohseni's guide shows how a .NET team can set it up with a CLAUDE.md, a PostToolUse build hook, plan mode and permission guardrails. It is worth reading if you want the agent to check its own work.

Six checks an AI Telegram assistant needs before the model runs

A developer built a Telegram assistant in n8n that can send email and book meetings, with its decisions guarded by a small ASP.NET Core API on .NET 10. The post lists six checks that run before the model sees a request: chat allowlist, duplicate updates, stale messages, voice length, contact ambiguity and time zones. It is a useful checklist for any bot that triggers side effects.

Dapper FluentMap Is Back: What Changed from 2.0 to 3.6

After six years without a stable release, Dapper FluentMap is maintained again and version 3.6.0 adds nested mappings, property converters, isolated runtimes, analyzers and source generators. The author stresses keeping existing applications working during upgrades. The piece also covers what to check before moving from 2.0.0 and which databases are certified.

Building an AI Knowledge Assistant with ASP.NET Core

This tutorial shows how to grow a single LLM call into a production-ready AI feature on ASP.NET Core. It covers authentication, retrieval-augmented generation, security and failure handling. It is a practical roadmap for .NET developers who want the model to stay a replaceable dependency inside their application.

Three Release Contracts for Obfuscated .NET Assemblies

Obfuscation turns into a release-engineering problem once you must rebuild, verify, or debug what shipped. The article proposes three contracts for Opaquer-protected releases: identity, integrity, and diagnostics. It gives .NET teams a practical checklist for keeping protected builds traceable and readable in production.