DatingApp

The project uses using the following technologies

.NET (5.0)
Angular 12
Entity Framework Core
Sqlite (As development database)

The programming languages used are

HTML
Bootstrap
CSS
TypeScript
C#

.NET CLI

Basic commands dotnet --info dotnet --version dotnet -h dotnet new -h dotnet new -l

To create a new solution using the CLI (name will be same as that of the folder which we are inside) dotnet new sln To create a new webapi project inside a folder called API dotnet new webapi -o API To add the project to the solution dotnet sln add API/ To run the API Project

cd into the API folder and run the command dotnet run

when we run the command dotnet run, we first go inside the program.cs class and search for the Main method. This inturn calls the startup.cs class. ConfigureServices method in startup.cs is like a DI container. All services to be used across project can be defined here. .NET Core will take care of their creation and destruction. Configure configure httprequest pipeline, controller mapping etc

To make live changes to files during run, run using the following command dotnet watch run

Entity Framework

An ORM (Object Relational Mapper)
Translate our code into SQL commands that update our tables in the database.
It has DbContext class from which we derive our context class to communicate with database. This class acts as a bridge between our domain(Entity classes) and out database.

Features of Entity Framework

Query our database using LINQ (Language Integrated Queries).
Change tracking. (Keep track of changes occuring).
It allows to insert, update and delete from DB.
Gives us a SaveChanges method to save these changes to the database.
Concurrency.
Provides automatic transaction management.
Caching - Repeated quering return data from cache.
Build-in conventions
Configure entities to override the conventions.
Migrations - create a db schema.

Installing Entity Framework package

Install Microsoft.EntityFrameworkCore.Sqlite

Installing dotnet ef tools

dotnet tool install --global dotnet-ef --version 5.0.8

Creating Migrations

To create a migration and place it in the folder Data/Migrations, run the following command dotnet ef migrations add InitialCreate -o Data/Migrations

Adding a migration and updating changes to db

  dotnet ef migrations add <name>
  dotnet ef database update

Droping database

  dotnet ef database drop

WebAPI

We make all the API calls asynchronous to make the app more scalable. If the no. of users increases and the app is handling the api calls synchronously, then the thread handling one request will be blocked and this reduces scalability. So we use asynchronous methods

Angular

To Install Angular globally, npm install -g @angular/cli

When running angular app using ng serve, it compiles the ts files to js and serves them from memory.
The js files that are compiled during runtime are injected to the index.html file using a utility called webpack. This is done by the Angular CLI.
The main.ts file bootstraps AppModule and inside the AppModule we bootstrap AppComponent. AppComponent is declared as a selector inside index.html.

Some good VSCode extensions for Angular

Angular Language Service
Angular Snippets (Version 12)
Bracket Pair Colorizer 2

In Angular we communicate with the API using HttpClientModule. we inject the http module in the constructor of app.component.ts using DI http methods are asynchronous so we use them in the ngOnInit() lifecycle event which works right after constructor.

CORS (Cross Origin Resource Sharing)

It is a security mechanism built into all mordern web browsers. It block the http requests from our front end (Angular app) to any api that is not in the same origin and local host of webapi is 5001, front end is 4200. We cannot access the api unless it provides a header saying that it's ok.

So we have to allow cors in .net api startup.cs and provide the origin of angular app.

Adding Angular BootStrap package

Angular BootStrap Run the following command ng add ngx-bootstrap

Adding Font awesome

npm install font-awesome

Storing password

Passwords can be saved in the database in 3 ways.

Clear text
Hashing password (use a hashing algorithm to encrypt the password before sending it to DB)
Hashing and salting password ()

Salting protects against general dictionay attack of passwords. But doesn't protect poor passwords.

We are using 3rd one. Sqlite stored byte[] as BLOB - (Binary Large Objects)

JWT (JSON Web Token)

JSON web token is an industry standard for token (RFC 7519).
Self-contained and can contain:
- Credentials
- Claims
- Other information

Json is a long string with 3 parts each seperated with a comma (,):

1. Header (Algorithm & Token type)
- Algorithm - [used to encrypt the signature in the 3rd part of the token]
- Type of token that it is - [type here is JWT]
1. PayLoad (Data)
- Contains information about claims and credentials.
- It can contains details like:
  - nameid
  - role
  - nbf (token cannot be used before a certain date and time)
  - exp (token cannot be used after this date)
  - iat (when the toke was issued at)
1. Signature
- The signature is encrypted by a secure key (secret key) at the server side. This key never leaves the server.
- Only the signature part of the token is encrypted.
Benifits of using JWT
- No session to manage - JWTs are self-contained tokens.
- Portable - A single token can be used with multiple backends.
- No cookies required - mobile friendly.
- Performance - Once a token is issued, there is no need to make a database request to verify a users authentication.

Services

Services implement the Single Responsibiliy Principle. They are only responsible for a single task. Here we create a TokenService which is responsible for only generating a token based on the userinfo passed in. Recieve a user <-> return a token.

Why Interface?

In the TokenService, we create an interface ITokenService. Why is this necessary? The TokenService can work without the interface. It is used because

Testing (it is very easy to mock an interface's behaviour.)
It is a best practise.

Extension Methods

Extension methods enable us to add methods to existing types without modifying the original type. We can extend the interface IServiceCollection in startup.cs and contain all the services that we are creating in extension classes. When creating an extension method:

The class, methods should be static
It should return an IServiceCollection

Extension methods help in reusing certain methods

Repository Pattern

A repository mediates between the domain and data mapping layers, acting like an in-memory domain object collection.

By using Repository, we introduce a layer of abstraction, repository acts as a layer between dbcontext and controller.

Reasons for using this pattern;

It encapsulates the logic.
Reduces Duplicate query logic.
Promotes testablility (unit testing becomes easy),(we can use mockRepository for testing)

Advantages of Repository

Minimizes duplicate query logic
Decouples application from persistence framework
All database queries are centralised and not scattered throughout the application.
Allows us to change ORM easily*.
Promotes testability. - we can easily mock a repository interface, testing against the dbcontext is more difficult.

Disadvantages of Repository

Abstraction of an abstraction (EF is already an abstraction)
Each root entity should have it's own repository (more code)
Also need to implement the UnitOfWork pattern to control transactions.

Pagination

Helps avoid performance problems.
Pagination Parameters are passed by query string.
- www.url.com/api/users?pageNumber=1&pageSize=5
Page size should be limited.
We should always page results.

Deferred Execution

eg:-

  var query = context.Users
              .Where(x => x.Gender == gender)
              .OrderBy(x => x.UserName)
              .Take(5)
              .Skip(5)

      query.count() // to get total count

We user take and skip operations for pagination - take 5 records and skip first 5.

Messaging Feature

A single user can send and recieve many message. So many to many relation. Angular Query Parameters. Angular Route resolvers - get data when a route is activated before a component is rendered

ASP.NET Identity

Refactoring the application to replace custom authentication with ASP.NET Identity.

Role Management
Policy based authorisation
UserManager,SignInManager,RoleManager
ASP.NET Identity comes with a password hasher with 10,000 salt iterations
Identity is a full functional framework for managing members and roles.
provides an EF schema to create the needed tables.
Highly customisable.

SignalR

Open source library that provides realtime web functionality to the application.

Setting up SignalR in API and client.
Implement live chat between users.

SignalR is good for:

Dashboards and monitoring apps.
Collaborative apps.
Apps that require notification.
Chat apps. Features:
Handles connection mgmt automatically.
sends message to all connected clients simultaneously.
sends message to specific clients or group of clients.
Supports : - WebSockets - Server-sent events - Long polling

SignalR uses maily 4 technologies:

WebSockets
Event Source (Server-sent events)
Forever Frames
Long polling (AJAX long polling)

Unit Of Work Pattern:

Each request is considered as a transactions.

Publishing

switching from sqlite to postgresql for deploying.
Publishing the angular app in API server.
Publishing the application to Heroku.
Integrating Heroku to GitHub.
Things to consider:
- environment variables.
- localhost
- CORS - if hosting in different domain, update CORS in server.
- Database
- Cost
- Capacity / scalability
- Seed Data
- Remove Fake delays!

Angular production build optimizations

The production configuration engages the following build optimization features.

Ahead-of-Time (AOT) Compilation: pre-compiles Angular component templates.
Production mode: deploys the production environment which enables production mode.
Bundling: concatenates your many application and library files into a few bundles.
Minification: removes excess whitespace, comments, and optional tokens.
Uglification: rewrites code to use short, cryptic variable and function names.
Dead code elimination: removes unreferenced modules and much unused code

Adithyavj/DatingApp