Professional ASP.NET MVC 3

PROFESSIONAL ASP.NET MVC 3......Page 5
CONTENTS......Page 13
FOREWORD......Page 25
INTRODUCTION......Page 27
A Quick Introduction to ASP.NET MVC......Page 33
The MVC Pattern......Page 34
The Road to MVC 3......Page 35
ASP.NET MVC 2 Overview......Page 36
Razor View Engine......Page 37
Streamlined Validation with Improved Model Validation......Page 40
JSON Binding......Page 41
MVC 3 Feature Summary: Easier at All Levels......Page 42
Installing the MVC 3 Development Components......Page 43
Creating an ASP.NET MVC 3 Application......Page 44
The New ASP.NET MVC 3 Dialog......Page 46
Testing......Page 47
Understanding the MVC Application Structure......Page 50
Convention over Configuration......Page 53
Summary......Page 54
The Controller’s Role......Page 55
A Brief History of Controllers......Page 56
A Sample Application: The MVC Music Store......Page 57
A Simple Example: The Home Controller......Page 61
Creating the New Controller......Page 64
Writing Your Action Methods......Page 65
Parameters in Controller Actions......Page 67
Summary......Page 69
CHAPTER 3: VIEWS......Page 71
What a View Does......Page 72
Specifying a View......Page 74
Strongly Typed Views......Page 75
View Models......Page 77
Understanding the Add View Dialog Options......Page 78
Customizing the T4 View Templates......Page 81
What is Razor?......Page 82
Code Expressions......Page 84
Html Encoding......Page 85
Code Blocks......Page 86
Implicit Code Expression......Page 87
Combining Text and Markup......Page 88
Escaping the Code Delimiter......Page 89
Layouts......Page 90
Specifying a Partial View......Page 92
The View Engine......Page 93
Configuring a View Engine......Page 94
Finding a View......Page 95
The View Itself......Page 96
Alternative View Engines......Page 97
Summary......Page 99
CHAPTER 4: MODELS......Page 101
Modeling the Music Store......Page 102
What Is Scaffolding?......Page 104
Controller with Read/Write Actions and Views, Using Entity Framework......Page 105
Code First Conventions......Page 106
Executing the Scaffolding Template......Page 107
The StoreManagerController......Page 108
The Views......Page 110
Creating Databases with the Entity Framework......Page 111
Using Database Initializers......Page 112
Seeding a Database......Page 113
Building a Resource to Edit an Album......Page 115
The Edit View......Page 117
Responding to the Edit POST Request......Page 118
The Edit Sad Path......Page 119
The DefaultModelBinder......Page 120
Explicit Model Binding......Page 121
Summary......Page 123
Using Forms......Page 125
To GET or To POST......Page 126
Searching for Music with a Search Form......Page 127
Searching for Music by Calculating the Action Attribute Value......Page 129
HTML Helpers......Page 130
Make Helpers Do Your Bidding......Page 131
Inside HTML Helpers......Page 132
Html.ValidationSummary......Page 133
Adding Inputs......Page 134
Html.Label......Page 135
Html.DropDownList (and Html.ListBox)......Page 136
Html.ValidationMessage......Page 137
Helpers, Models, and View Data......Page 138
Strongly-Typed Helpers......Page 140
Templated Helpers......Page 141
Html.Hidden......Page 142
Html.RadioButton......Page 143
Html.ActionLink and Html.RouteLink......Page 144
URL Helpers......Page 145
Html.Partial and Html.RenderPartial......Page 146
Html.Action and Html.RenderAction......Page 147
Summary......Page 148
CHAPTER 6: DATA ANNOTATIONS AND VALIDATION......Page 149
Annotating Orders for Validation......Page 150
Required......Page 151
StringLength......Page 152
Validation Attributes from System.Web.Mvc......Page 153
Custom Error Messages and Localization......Page 154
Looking Behind the Annotation Curtain......Page 155
Validation and Model State......Page 156
Controller Actions and Validation Errors......Page 157
Custom Annotations......Page 158
IValidatableObject......Page 162
Display......Page 163
DisplayFormat......Page 164
HiddenInput......Page 165
Summary......Page 166
CHAPTER 7: SECURING YOUR APPLICATION......Page 167
Using the Authorize Attribute to Require Login......Page 169
Securing Controller Actions......Page 170
How the AuthorizeAttribute Works with Forms Authentication and the AccountController......Page 175
Windows Authentication in the Intranet Application Template......Page 176
Using the Authorize Attribute to Require Role Membership......Page 177
Extending Roles and Membership......Page 178
Passive Injection......Page 179
Active Injection......Page 182
Preventing XSS......Page 183
Threat Summary......Page 189
Preventing CSRF Attacks......Page 192
Threat: Cookie Stealing......Page 193
Threat Summary......Page 194
Threat Summary......Page 195
Preventing Over-Posting with the Bind Attribute......Page 196
Threat Summary......Page 197
Protecting Your ASP.NET MVC 1 and MVC 2 Applications......Page 202
Taking Additional Actions When an Open Redirect Attempt Is Detected......Page 204
Using Configuration Transforms......Page 206
Using Retail Deployment Configuration in Production......Page 207
Security Recap and Helpful Resources......Page 208
Summary: It’s Up to You......Page 209
CHAPTER 8: AJAX......Page 211
The jQuery Function......Page 212
jQuery Events......Page 214
Unobtrusive JavaScript......Page 215
Using jQuery......Page 216
Custom Scripts......Page 217
And Now for the Rest of the Scripts......Page 218
AJAX ActionLinks......Page 219
HTML 5 Attributes......Page 221
AJAX Forms......Page 222
jQuery Validation......Page 224
Custom Validation......Page 226
IClientValidatable......Page 227
Custom Validation Script Code......Page 228
jQuery UI......Page 230
Adding the Behavior......Page 232
Building the Data Source......Page 233
JSON and jQuery Templates......Page 235
Modifying the Search Form......Page 236
Get JSON!......Page 238
jQuery.ajax for Maximum Flexibility......Page 239
Script Optimizations......Page 240
Summary......Page 241
CHAPTER 9: ROUTING......Page 243
Understanding URLs......Page 244
Defining Routes......Page 245
Route URLs......Page 246
Route Values......Page 247
Route Defaults......Page 249
Route Constraints......Page 252
Named Routes......Page 253
Area Route Registration......Page 255
Area Route Conflicts......Page 256
Multiple URL Parameters in a Segment......Page 257
StopRoutingHandler and IgnoreRoute......Page 258
Debugging Routes......Page 259
Under the Hood: How Routes Generate URLs......Page 260
High-Level View of URL Generation......Page 261
Detailed Look at URL Generation......Page 262
Ambient Route Values......Page 264
Overflow Parameters......Page 265
More Examples of URL Generation with the Route Class......Page 266
RouteData......Page 267
Custom Route Constraints......Page 268
Using Routing with Web Forms......Page 269
Summary......Page 270
Introduction to NuGet......Page 271
Installing NuGet......Page 272
Finding Packages......Page 274
Installing a Package......Page 276
Updating a Package......Page 279
Using the Package Manager Console......Page 280
Creating Packages......Page 282
NuSpec File......Page 283
Metadata......Page 284
Dependencies......Page 285
Specifying Files to Include......Page 286
Tools......Page 287
Framework and Profile Targeting......Page 290
Publishing to NuGet.org......Page 292
Publishing Using NuGet.exe......Page 295
Using the Package Explorer......Page 296
Hosting A Private NuGet Feed......Page 298
Summary......Page 302
Understanding Software Design Patterns......Page 303
Design Pattern: Inversion of Control......Page 304
Strongly-Typed Service Locator......Page 306
Weakly-Typed Service Locator......Page 307
Constructor Injection......Page 310
Property Injection......Page 311
Dependency Injection Containers......Page 312
Using the Dependency Resolver......Page 313
Singly-Registered Services......Page 315
Multiply-Registered Services......Page 316
Creating Arbitrary Objects......Page 319
Creating Controllers......Page 320
Creating Views......Page 321
Summary......Page 322
CHAPTER 12: UNIT TESTING......Page 323
Testing in Isolation......Page 324
Unit Testing as a Quality Activity......Page 325
The Red/Green Cycle......Page 326
Structuring Tests with Arrange, Act, Assert......Page 327
Creating a Unit Test Project......Page 328
Examining the Default Unit Tests......Page 329
Only Test the Code You Write......Page 332
Testing Controllers......Page 333
Pass Service Dependencies via Constructor......Page 334
Favor Action Results over HttpContext Manipulation......Page 335
Favor Action Parameters over UpdateModel......Page 337
Testing Routes......Page 338
Testing Calls to IgnoreRoute......Page 339
Testing Calls to MapRoute......Page 340
Testing Validators......Page 341
Summary......Page 345
CHAPTER 13: EXTENDING MVC......Page 347
Exposing Request Data with Value Providers......Page 348
Creating Models with Model Binders......Page 349
Describing Models with Metadata......Page 354
Validating Models......Page 356
Customizing View Engines......Page 360
Writing HTML Helpers......Page 362
Writing Razor Helpers......Page 363
Filtering Actions with Method Selectors......Page 364
Action Filters......Page 365
Action and Result Filters......Page 366
Providing Custom Results......Page 367
Summary......Page 369
Templated Razor Delegates......Page 371
View Compilation......Page 373
Advanced Scaffolding......Page 374
The MvcScaffolding NuGet Package......Page 375
Using the Repository Template......Page 376
RouteMagic......Page 379
Editable Routes......Page 380
The Default Templates......Page 385
MVC Futures and Template Definitions......Page 386
Template Selection......Page 388
Custom Templates......Page 389
Defining the Controller: The IController Interface......Page 391
The Controller Class and Actions......Page 393
Action Methods......Page 395
The ActionResult......Page 399
Action Result Helper Methods......Page 400
Action Result Types......Page 401
Implicit Action Results......Page 405
Action Invoker......Page 406
How an Action Is Mapped to a Method......Page 407
Invoking Actions......Page 410
Using Asynchronous Controller Actions......Page 411
Choosing Synchronous versus Asynchronous Pipelines......Page 412
Writing Asynchronous Action Methods......Page 413
Performing Multiple Parallel Operations......Page 414
Timeouts......Page 416
Additional Considerations for Asynchronous Methods......Page 417
Summary......Page 419
INDEX......Page 421
ADVERTISEMENT......Page 433