diff --git a/aspnetcore/blazor/tooling/_static/install-certificate.png b/aspnetcore/blazor/tooling/_static/install-certificate.png index 423c9fedb23d..de800ed4fcc5 100644 Binary files a/aspnetcore/blazor/tooling/_static/install-certificate.png and b/aspnetcore/blazor/tooling/_static/install-certificate.png differ diff --git a/aspnetcore/blazor/tutorials/movie-database-app/part-1/_static/install-certificate.png b/aspnetcore/blazor/tutorials/movie-database-app/part-1/_static/install-certificate.png index 423c9fedb23d..de800ed4fcc5 100644 Binary files a/aspnetcore/blazor/tutorials/movie-database-app/part-1/_static/install-certificate.png and b/aspnetcore/blazor/tutorials/movie-database-app/part-1/_static/install-certificate.png differ diff --git a/aspnetcore/fundamentals/openapi/aspnetcore-openapi.md b/aspnetcore/fundamentals/openapi/aspnetcore-openapi.md index 4c3152603259..9d10200bf2f3 100644 --- a/aspnetcore/fundamentals/openapi/aspnetcore-openapi.md +++ b/aspnetcore/fundamentals/openapi/aspnetcore-openapi.md @@ -227,9 +227,7 @@ In order to restrict these code paths from being invoked by the build-time gener :::code language="csharp" source="~/fundamentals/openapi/samples/9.x/AspireApp1/AspireApp1.Web/Program.cs" highlight="5-8"::: -[AddServiceDefaults](https://source.dot.net/#TestingAppHost1.ServiceDefaults/Extensions.cs,0f0d863053754768,references) Adds common .NET Aspire services such as service discovery, resilience, health checks, and OpenTelemetry. - -:::moniker-end +[AddServiceDefaults](https://source.dot.net/#TestingAppHost1.ServiceDefaults/Extensions.cs,0f0d863053754768,references) adds common .NET Aspire services such as service discovery, resilience, health checks, and OpenTelemetry. ## Trimming and Native AOT @@ -263,4 +261,6 @@ Publish the app. dotnet publish ``` +:::moniker-end + [!INCLUDE[](~/fundamentals/openapi/includes/aspnetcore-openapi6-8.md)] diff --git a/aspnetcore/release-notes/aspnetcore-10.0.md b/aspnetcore/release-notes/aspnetcore-10.0.md new file mode 100644 index 000000000000..b71a2f096a16 --- /dev/null +++ b/aspnetcore/release-notes/aspnetcore-10.0.md @@ -0,0 +1,38 @@ +--- +title: What's new in ASP.NET Core 10.0 +author: rick-anderson +description: Learn about the new features in ASP.NET Core 10.0. +ms.author: riande +ms.custom: mvc +ms.date: 2/5/2025 +uid: aspnetcore-10 +--- +# What's new in ASP.NET Core 10.0 + +This article highlights the most significant changes in ASP.NET Core 10.0 with links to relevant documentation. + +This article will be updated as new preview releases are made available. See the [Asp.Net Core announcement page](https://github.com/aspnet/announcements/issues?q=is%3Aopen+is%3Aissue+milestone%3A1.0.0-rc2) until this page is updated. + + + +## Blazor + +This section describes new features for Blazor. + +## SignalR + +This section describes new features for SignalR. + +## Minimal APIs + +This section describes new features for minimal APIs. + +## Authentication and authorization + +This section describes new features for authentication and authorization. + +## Miscellaneous + +This section describes miscellaneous new features in ASP.NET Core 9. + +## Related content diff --git a/aspnetcore/release-notes/aspnetcore-9/_static/signalr-activities-events.png b/aspnetcore/release-notes/aspnetcore-9/_static/signalr-activities-events.png index 83e08676630b..219874b81ad9 100644 Binary files a/aspnetcore/release-notes/aspnetcore-9/_static/signalr-activities-events.png and b/aspnetcore/release-notes/aspnetcore-9/_static/signalr-activities-events.png differ diff --git a/aspnetcore/security/anti-request-forgery.md b/aspnetcore/security/anti-request-forgery.md index 1fdb30ce656e..d0dca4f415e8 100644 --- a/aspnetcore/security/anti-request-forgery.md +++ b/aspnetcore/security/anti-request-forgery.md @@ -268,7 +268,7 @@ The following example uses JavaScript to make an AJAX request to obtain the toke -### Antiforgery with Minimal APIs +## Antiforgery with Minimal APIs Call [AddAntiforgery](/dotnet/api/microsoft.extensions.dependencyinjection.antiforgeryservicecollectionextensions.addantiforgery) and to register antiforgery services in DI. Antiforgery tokens are used to mitigate [cross-site request forgery attacks](xref:security/anti-request-forgery). diff --git a/aspnetcore/test/http-files.md b/aspnetcore/test/http-files.md index b158391084ff..c087990435af 100644 --- a/aspnetcore/test/http-files.md +++ b/aspnetcore/test/http-files.md @@ -190,6 +190,83 @@ A variable defined in an environment file can be the same as one defined in the In the preceding example, the `$shared` environment defines the `HostAddress` variable with the value `localhost:7293`. The `HostAddress` variable with the value `localhost:7293` functions as a default for environments that don't define a `HostAddress`. When the `dev1` or `dev2` environment is defined, the value for `HostAddress` comes from the `$shared` environment because `dev1` and `dev2` don't define a `HostAddress` variable. When the `staging` environment is defined, the value for `HostAddress` is set to `https://staging.contoso.com`, overriding the `$shared` default. +## Request variables + +You can pass values from one HTTP request to another within the same `.http` file. + +1. Create a single-line comment located just before a request URL to name the following request. For example, the following lines show alternative ways to name the request `login`: + + ```http + # @name login + https://contoso.com/api/login HTTP/1.1 + ``` + + ```http + // @name login + https://contoso.com/api/login HTTP/1.1 + ``` + +1. In subsequent requests in the same HTTP file use the request name to refer to the request. +1. Use the following syntax to extract the specific part of the response that you want. + + ```http + {{.(response|request).(body|headers).(*|JSONPath|XPath|
)}}. + ``` + + This syntax lets you extract values from the request itself or from the response to it (`request|response`). For either request or response, you can extract values from the body or the headers (`body|headers`). + + When `body` is selected, the `*|JSONPath|XPath` part of the syntax applies: + + * `*` extracts the entire response body. + + Example: `{{login.response.body.*}}` + + * For JSON responses, use [JSONPath](https://www.rfc-editor.org/rfc/rfc9535.html) to extract a specific property or attribute. + + Example: `{{login.response.body.$.token}}` + + * For XML responses, use [XPath](https://www.w3schools.com/xml/xpath_syntax.asp) to extract a specific property or attribute. + + Example: `{{login.response.body./token}}` + + When `headers` is selected, a header name extracts the entire header. Header names are case-insensitive. + + Example: `{{login.response.headers.Location}}` + +If you want to refer to the response of a named request, you need to manually trigger the named request to retrieve its response first. When you extract values from the response, you'll get the latest response if the request has been sent more than once. + +### Example request variable usage + +For example, suppose your HTTP file has a request that authenticates the caller, and you name it `login`. The response body is a JSON document that contains the bearer token in a property named `token`. In subsequent requests, you want to pass in this bearer token in an `Authorization` header. The following example does this: + +```http +#@name login + +POST {{TodoApi_HostAddress}}/users/token +Content-Type: application/json + +{ + "username": "{{myusername}}", +} + +### + +GET {{TodoApi_HostAddress}}/todos +Authorization: Bearer {{login.response.body.$.token}} + +### +``` + +The syntax `{{login.response.body.$.token}}` represents the bearer token: + +* **`login`**: Is the request name. +* **`response`**: Refers to the HTTP response object. +* **`body`**: Refers to the body of the HTTP response. +* **`$`**: Represents the root element of the JSON document in the response body. +* **`token`**: Refers to the specific property within the JSON document. + +Without using request variables you would need to manually extract the token from the login response and include it in the header of subsequent requests. Request variables enable you to automate this process. + ## User-specific environment files A user-specific value is any value that a developer wants to test with but doesn't want to share with the team. The `http-client.env.json` file is checked in to source control by default, therefore, ***DO NOT*** add user-specific values to this file. Rather, add user-specific values in a file named `http-client.env.json.user`. The `http-client.env.json.user` file is located in the same folder as the `http-client.env.json` file. Files that end with `.user` are excluded from source control by default when using Visual Studio source control features. @@ -455,7 +532,6 @@ Some of the preceding examples use the free open-source website . T The Visual Studio 2022 `.http` file editor doesn't have all the features that the Visual Studio Code [REST Client extension](https://marketplace.visualstudio.com/items?itemName=humao.rest-client) has. The following list includes some of the more significant features available only in the Visual Studio Code extension: * Request line that spans more than one line -* Named requests * Specify file path as body of the request * Mixed format for body when using multipart/form-data * GraphQL requests diff --git a/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_blank_created_empty.png b/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_blank_created_empty.png index e664ff8dc2d8..f6c12164d568 100644 Binary files a/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_blank_created_empty.png and b/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_blank_created_empty.png differ diff --git a/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_create_blank.png b/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_create_blank.png index 45454a2b6325..e9b11840528a 100644 Binary files a/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_create_blank.png and b/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_api_create_blank.png differ diff --git a/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_finish.png b/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_finish.png index e7c6b5c002ae..9b17cd7e8e94 100644 Binary files a/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_finish.png and b/aspnetcore/tutorials/publish-to-azure-api-management-using-vs/_static/portal_finish.png differ