#security
security

Multi-tenancy in EF Core: no tenant means no rows

The author shows a multi-tenancy pattern for ASP.NET Core and EF Core that uses global query filters so each request only sees its own tenant's rows. When no tenant is set, filtered queries return nothing, which fails closed. The post also covers tenant-scoped unique indexes, limiting IgnoreQueryFilters(), and an integration test that checks cross-tenant access. It is a practical starting point for SaaS backends.

A C# MCP Server with Single-Use Order Approvals

Martin Pisacreta built a small .NET 8 MCP server where the order cancellation tool requires a separately recorded, single-use, expiring approval instead of trusting the model's confirmation. The article walks through the claim-before-use approval store, the tool contract and the limits of the design, backed by 12 passing tests.

Making Stripe webhooks idempotent in ASP.NET Core

The author explains an inbox pattern that stops a Stripe webhook from applying a payment twice when deliveries repeat or overlap. The sample verifies the raw body, claims events with a unique-key insert, and commits the claim together with the local payment change. Its 38-test suite exercises duplicates, rollback and retries, making it a concrete reference for payment flows in ASP.NET Core.

Resilient Retries and Read Replicas in OrmLite

ServiceStack v10.4 lets OrmLite retry temporary database errors such as deadlocks, throttling and failovers through a single configuration line. It also adds read replica support, with read-only connections that reject writes even on the primary so replica bugs surface during development. Both features matter for any .NET app that talks to a database under load.

GitHub Copilot adds server-to-server authentication for SDK agents

GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, in public preview. Agents and services built with the Copilot SDK can make requests for an organization without a signed-in user's credentials. Usage is billed to the owning organization and governed by its model policies and budgets.

EF Core Migrations: Why Bundles Beat Startup MigrateAsync()

This guide explains why running MigrateAsync() at application startup couples deployments to schema changes and grants the app more database permissions than it needs. It walks through EF migration bundles as a controlled CI deployment step, with GitHub Actions and local examples. It also covers when runtime migrations are acceptable and the practical limits of bundles, such as the lack of a dry run.

Configuring Claude Code Permissions for .NET Development

How should you configure Claude Code permissions so a coding agent can build and test a .NET project without gaining database or publish authority? This guide explains the documented rule order, settings scopes, wildcard risks, and boundaries for migrations and deployments. It is worth reading before you run agents unattended on .NET repositories.

Visual Studio October update: compare commits to your working tree and bulk-resolve conflicts

The October Visual Studio 2026 update lets you compare an earlier commit with your current working tree, including unsaved edits in progress, and resolve merge conflicts across many files at once. It also adds a new Copilot Chat experience, Hot Exit, and keyboard tab reordering. These changes speed up everyday Git work.

DDD in an LDAP web console: what worked, what was cut, and why tests guard layers

Axia is an open-source .NET 10 web console and REST API for Active Directory and OpenLDAP. Its author explains why half of the initial DDD design was dropped after several security reviews. The article covers what paid off, including value objects, ports and adapters, and architecture tests, and what was replaced, such as domain-event auditing.

Choosing a .NET Base Image: Chiseled, Distroless or Alpine

Distroless, Chiseled and Alpine are often treated as interchangeable, but they differ in C library and runtime model. This guide explains how to pick a .NET base image by libc, globalization, publish model and diagnostics before image size. It matters for anyone shipping containers, since a smaller image that breaks native libraries or culture formatting is incompatible rather than optimized.

GitHub Copilot assisted permissions now generally available

Assisted permissions are now generally available in GitHub Copilot CLI, the GitHub Copilot app and VS Code. A language model reviews each permission request, auto-approving those it judges clearly safe while sending the rest for your approval. Enterprises can control the mode through policy.

PHP2Shell and Azure DevOps: what Pipelines users should check

PHP disclosed two critical vulnerabilities on October 21, 2026 that can allow remote code execution. Azure DevOps Services and Server do not use PHP for customer requests, so the exposure sits in the PHP runtimes your pipelines, agents, containers and deployed apps use. The post explains which PHP installs Microsoft patches and which ones you must patch.