Professional ASP.NET MVC 4

Transcription

1 Professional ASP.NET MVC 4 Galloway, J ISBN-13: Table of Contents FOREWORD xxvii INTRODUCTION xxix CHAPTER 1: GETTING STARTED 1 A Quick Introduction to ASP.NET MVC 1 How ASP.NET MVC Fits in with ASP.NET 2 The MVC Pattern 2 MVC as Applied to Web Frameworks 3 The Road to MVC 4 3 ASP.NET MVC 1 Overview 4 ASP.NET MVC 2 Overview 4 ASP.NET MVC 3 Overview 5 MVC 4 Overview 10 ASP.NET Web API 10 Enhancements to Default Project Templates 11 Mobile Project Template using jquery Mobile 13 Display Modes 14 Bundling and Minifi cation 14 Included Open Source Libraries 15 Miscellaneous Features 15 Open Source Release 17 Creating an MVC 4 Application 17 Software Requirements for ASP.NET MVC 4 17 Installing ASP.NET MVC 4 18 Installing the MVC 4 Development Components 18 Installing MVC 4 on a Server 18 Creating an ASP.NET MVC 4 Application 19 The New ASP.NET MVC 4 Dialog 20 Application Templates 20 View Engines 22 Testing 22 The MVC Application Structure 24 ASP.NET MVC and Conventions 27 Convention over Confi guration 28

2 Conventions Simplify Communication 29 Summary 29 CHAPTER 2: CONTROLLERS 31 The Controller s Role 31 A Sample Application: The MVC Music Store 34 Controller Basics 36 A Simple Example: The Home Controller 37 Writing Your First Controller 40 Creating the New Controller 40 Writing Your Action Methods 42 A Few Quick Observations 43 Parameters in Controller Actions 43 Summary 46 CHAPTER 3: VIEWS 47 The Purpose of Views 48 Specifying a View 49 ViewData and ViewBag 51 Strongly Typed Views 52 View Models 54 Adding a View 54 Understanding the Add View Dialog Options 55 The Razor View Engine 57 What Is Razor? 57 Code Expressions 59 HTML Encoding 61 Code Blocks 62 Razor Syntax Samples 63 Implicit Code Expression 63 Explicit Code Expression 63 Unencoded Code Expression 64 Code Block 64 Combining Text and Markup 64 Mixing Code and Plain Text 65 Escaping the Code Delimiter 65 Server-Side Comment 65 Calling a Generic Method 66 Layouts 66 ViewStart 69 Specifying a Partial View 69

3 Summary 70 CHAPTER 4: MODELS 71 Modeling the Music Store 72 Scaff olding a Store Manager 74 What Is Scaff olding? 74 Empty Controller 75 Controller with Empty Read/Write Actions 75 API Controller with Empty Read/Write Actions 75 Controller with Read/Write Actions and Views, Using Entity Framework 75 Scaff olding and the Entity Framework 76 Code First Conventions 77 The DbContext Class 77 Executing the Scaff olding Template 78 The Data Context 79 The StoreManagerController 79 The Views 81 Executing the Scaff olded Code 82 Creating Databases with the Entity Framework 82 Using Database Initializers 83 Seeding a Database 84 Editing an Album 86 Building a Resource to Edit an Album 86 Models and View Models Redux 88 The Edit View 88 Responding to the Edit POST Request 89 The Edit Happy Path 90 The Edit Sad Path 90 Model Binding 91 The DefaultModelBinder 91 Explicit Model Binding 92 Summary 94 CHAPTER 5: FORMS AND HTML HELPERS 95 Using Forms 95 The Action and the Method 96 To GET or to POST? 97 Searching for Music with a Search Form 97 Searching for Music by Calculating the Action Attribute Value 99 HTML Helpers 100 Automatic Encoding 100

4 Making Helpers Do Your Bidding 101 Inside HTML Helpers 102 Setting Up the Album Edit Form 102 Html.BeginForm 102 Html.ValidationSummary 103 Adding Inputs 103 Html.TextBox and Html.TextArea 104 Html.Label 105 Html.DropDownList and Html.ListBox 105 Html.ValidationMessage 107 Helpers, Models, and View Data 107 Strongly Typed Helpers 109 Helpers and Model Metadata 110 Templated Helpers 111 Helpers and ModelState 112 Other Input Helpers 112 Html.Hidden 112 Html.Password 112 Html.RadioButton 113 Html.CheckBox 113 Rendering Helpers 113 Html.ActionLink and Html.RouteLink 114 URL Helpers 114 Html.Partial and Html.RenderPartial 115 Html.Action and Html.RenderAction 116 Passing Values to RenderAction 117 Cooperating with the ActionName Attribute 117 Summary 118 CHAPTER 6: DATA ANNOTATIONS AND VALIDATION 119 Annotating Orders for Validation 120 Using Validation Annotations 122 Required 122 StringLength 122 RegularExpression 123 Range 123 Validation Attributes from System.Web.Mvc 124 Custom Error Messages and Localization 125 Looking behind the Annotation Curtain 125

5 Validation and Model Binding 126 Validation and Model State 126 Controller Actions and Validation Errors 127 Custom Validation Logic 128 Custom Annotations 129 IValidatableObject 132 Display and Edit Annotations 133 Display 133 Scaff oldcolumn 134 DisplayFormat 134 ReadOnly 134 DataType 135 UIHint 135 HiddenInput 135 Summary 135 CHAPTER 7: MEMBERSHIP, AUTHORIZATION, AND SECURITY 137 Using the Authorize Attribute to Require Login 139 Securing Controller Actions 140 How the AuthorizeAttribute Works with Forms Authentication and the AccountController 143 Windows Authentication in the Intranet Application Template 145 Securing Entire Controllers 146 Securing Your Entire Application Using a Global Authorization Filter 147 Using the Authorize Attribute to Require Role Membership 148 Extending Roles and Membership 149 External Login via OAuth and OpenID 150 Registering External Login Providers 150 Configuring OpenID Providers 152 Configuring OAuth Providers 155 Security Implications of External Logins 155 Trusted External Login Providers 155 Require SSL for Login 156 Understanding the Security Vectors in a Web Application 157 Threat: Cross-Site Scripting 157 Threat Summary 157 Passive Injection 157 Active Injection 160 Preventing XSS 162 Threat: Cross-Site Request Forgery 167

6 Threat Summary 167 Preventing CSRF Attacks 169 Threat: Cookie Stealing 171 Threat Summary 171 Preventing Cookie Theft with HttpOnly 172 Threat: Over-Posting 172 Threat Summary 173 Preventing Over-Posting with the Bind Attribute 174 Threat: Open Redirection 175 Threat Summary 175 Protecting Your ASP.NET MVC 1 and MVC 2 Applications 179 Taking Additional Actions When an Open Redirect Attempt Is Detected 182 Open Redirection Summary 183 Proper Error Reporting and the Stack Trace 183 Using Confi guration Transforms 184 Using Retail Deployment Confi guration in Production 185 Using a Dedicated Error Logging System 185 Security Recap and Helpful Resources 185 Summary 187 CHAPTER 8: AJAX 189 jquery 190 jquery Features 190 The jquery Function 190 jquery Selectors 192 jquery Events 192 jquery and Ajax 193 Unobtrusive JavaScript 193 Using jquery 194 Custom Scripts 195 Placing Scripts in Sections 195 The Rest of the Scripts 196 Ajax Helpers 196 Ajax ActionLinks 197 HTML 5 Attributes 199 Ajax Forms 200 Client Validation 202 jquery Validation 202 Custom Validation 203 IClientValidatable 204

7 Custom Validation Script Code 205 Beyond Helpers 207 jquery UI 208 Autocomplete with jquery UI 209 Adding the Behavior 210 Building the Data Source 210 JSON and Client-Side Templates 212 Adding Templates 212 Modifying the Search Form 213 Getting JSON 214 jquery.ajax for Maximum Flexibility 216 Improving Ajax Performance 217 Using Content Delivery Networks 217 Script Optimizations 217 Bundling and Minifi cation 218 Summary 219 CHAPTER 9: ROUTING 221 Uniform Resource Locators 222 Introduction to Routing 223 Comparing Routing to URL Rewriting 223 Defining Routes 224 Route URLs 224 Route Values 226 Route Defaults 227 Route Constraints 230 Named Routes 231 MVC Areas 233 Area Route Registration 233 Area Route Confl icts 234 Catch-All Parameter 234 Multiple URL Parameters in a Segment 235 StopRoutingHandler and IgnoreRoute 236 Debugging Routes 237 Under the Hood: How Routes Generate URLs 239 High-Level View of URL Generation 239 A Detailed Look at URL Generation 240 Ambient Route Values 242 Overfl ow Parameters 244 More Examples of URL Generation with the Route Class 244

8 Under the Hood: How Routes Tie Your URL to an Action 245 The High-Level Request Routing Pipeline 246 RouteData 246 Custom Route Constraints 246 Using Routing with Web Forms 247 Summary 248 CHAPTER 10: NUGET 249 Introduction to NuGet 249 Installing NuGet 250 Adding a Library as a Package 252 Finding Packages 252 Installing a Package 254 Updating a Package 256 Recent Packages 257 Package Restore 257 Using the Package Manager Console 259 Creating Packages 262 Packaging a Project 262 Packaging a Folder 263 NuSpec File 263 Metadata 264 Dependencies 266 Specifying Files to Include 267 Tools 268 Framework and Profi le Targeting 271 Prerelease Packages 272 Publishing Packages 272 Publishing to NuGet.org 273 Using NuGet.exe 274 Using the Package Explorer 275 Summary 278 CHAPTER 11: ASP.NET WEB API 279 Defining ASP.NET Web API 280 Getting Started with Web API 280 Writing an API Controller 281 Examining the Sample ValuesController 282 Async by Design: IHttpController 283 Incoming Action Parameters 284 Action Return Values, Errors, and Asynchrony 284

9 Configuring Web API 285 Configuration in Web-Hosted Web API 286 Configuration in Self-Hosted Web API 286 Configuration in Third-Party Hosts 287 Adding Routes to Your Web API 287 Binding Parameters 288 Filtering Requests 290 Enabling Dependency Injection 291 Exploring APIs Programmatically 292 Tracing the Application 293 Web API Example: ProductsController 293 Summary 296 CHAPTER 12: DEPENDENCY INJECTION 297 Software Design Patterns 297 Design Pattern: Inversion of Control 298 Design Pattern: Service Locator 300 Strongly Typed Service Locator 300 Weakly Typed Service Locator 301 The Pros and Cons of Service Locators 304 Design Pattern: Dependency Injection 304 Constructor Injection 304 Property Injection 305 Dependency Injection Containers 306 Dependency Resolution in MVC 307 Singly Registered Services in MVC 308 Multiply Registered Services in MVC 309 Arbitrary Objects in MVC 311 Creating Controllers 311 Creating Views 312 Dependency Resolution in Web API 313 Singly Registered Services in Web API 314 Multiply Registered Services in Web API 315 Arbitrary Objects in Web API 316 Dependency Resolvers in MVC vs. Web API 316 Summary 316 CHAPTER 13: UNIT TESTING 317 The Meaning of Unit Testing and Test-Driven Development 318 Defining Unit Testing 318 Testing Small Pieces of Code 318

10 Testing in Isolation 318 Testing Only Public Endpoints 319 Automated Results 319 Unit Testing as a Quality Activity 319 Defining Test-Driven Development 320 The Red/Green Cycle 320 Refactoring 321 Structuring Tests with Arrange, Act, Assert 321 The Single Assertion Rule 322 Creating a Unit Test Project 322 Examining the Default Unit Tests 323 Test Only the Code You Write 327 Tips and Tricks for Unit Testing ASP.NET MVC Applications 328 Testing Controllers 328 Keeping Business Logic out of Your Controllers 328 Passing Service Dependencies via Constructor 329 Favoring Action Results over HttpContext Manipulation 330 Favoring Action Parameters over UpdateModel 331 Using Action Filters for Orthogonal Activities 332 Testing Routes 333 Testing Calls to IgnoreRoute 333 Testing Calls to MapRoute 334 Testing Unmatched Routes 335 Testing Validators 335 Summary 339 CHAPTER 14: EXTENDING MVC 341 Extending Models 342 Turning Request Data into Models 342 Exposing Request Data with Value Providers 342 Creating Models with Model Binders 343 Describing Models with Metadata 348 Validating Models 350 Extending Views 354 Customizing View Engines 354 Writing HTML Helpers 356 Writing Razor Helpers 357 Extending Controllers 358 Selecting Actions 358 Choosing Action Names with Name Selectors 358

11 Filtering Actions with Method Selectors 358 Action Filters 359 Authorization Filters 360 Action and Result Filters 360 Exception Filters 361 Providing Custom Results 361 Summary 363 CHAPTER 15: ADVANCED TOPICS 365 Mobile Support 365 Adaptive Rendering 366 The Viewport Meta Tag 368 Adaptive Styles Using CSS Media Queries 368 Display Modes 370 Layout and Partial View Support 371 Custom Display Modes 371 Mobile Site Template 372 Advanced Razor 373 Templated Razor Delegates 373 View Compilation 374 Advanced View Engines 376 Confi guring a View Engine 377 Finding a View 377 The View Itself 378 Alternative View Engines 380 New View Engine or New ActionResult? 381 Advanced Scaff olding 381 Customizing T4 Code Templates 382 The MvcScaff olding NuGet Package 383 Updated Add Controller Dialog Options 383 Using the Repository Template 384 Adding Scaff olders 386 Additional Resources 386 Advanced Routing 386 RouteMagic 387 Editable Routes 387 Advanced Templates 391 The Default Templates 392 MVC Futures and Template Definitions 392 Template Selection 395

12 Custom Templates 396 Advanced Controllers 397 Defining the Controller: The IController Interface 397 The ControllerBase Abstract Base Class 398 The Controller Class and Actions 399 Action Methods 401 The ActionResult 401 Action Result Helper Methods 402 Action Result Types 404 Implicit Action Results 408 Action Invoker 410 How an Action Is Mapped to a Method 410 Invoking Actions 414 Using Asynchronous Controller Actions 414 Choosing Synchronous versus Asynchronous Pipelines 416 Writing Asynchronous Action Methods 416 Performing Multiple Parallel Operations 417 MVC 2 and 3 Using AsyncController 419 Summary 421 CHAPTER 16: REAL-WORLD ASP.NET MVC: BUILDING THE NUGET.ORG WEBSITE 423 May the Source Be with You 424 WebActivator 425 ASP.NET Dynamic Data 426 Exception Logging 430 Profiling 431 Data Access 434 EF Code-Based Migrations 434 Membership 436 Other Useful NuGet Packages 438 T4MVC 438 WebBackgrounder 438 Lucene.NET 439 AnglicanGeek.MarkdownMailer 439 Ninject 440 Summary 440 INDEX 443