ASP.NET Core and Blazor updates in .NET Core 3.0 Preview 6

[xSicKxBot]

ASP.NET Core and Blazor updates in .NET Core 3.0 Preview 6

Daniel

June 12th, 2019

.NET Core 3.0 Preview 6 is now available and it includes a bunch of new updates to ASP.NET Core and Blazor.

Here’s the list of what’s new in this preview:

• New Razor features:
  Code:

  @attribute
  ,
  Code:

  @code
  ,
  Code:

  @key
  ,
  Code:

  @namespace
  , markup in
  Code:

  @functions
  
  
• Blazor directive attributes
  
  
• Authentication & authorization support for Blazor apps
  
  
• Static assets in Razor class libraries
  
  
• Json.NET no longer referenced in project templates
  
  
• Certificate and Kerberos Authentication
  
  
• SignalR Auto-reconnect
  
  
• Managed gRPC Client
  
  
• gRPC Client Factory
  
  
• gRPC Interceptors
  

Please see the release notes for additional details and known issues.

Get started

To get started with ASP.NET Core in .NET Core 3.0 Preview 6 install the .NET Core 3.0 Preview 6 SDK

If you’re on Windows using Visual Studio, you also need to install the latest preview of Visual Studio 2019.

For the latest client-side Blazor templates also install the latest Blazor extension from the Visual Studio Marketplace.

Upgrade an existing project

To upgrade an existing an ASP.NET Core app to .NET Core 3.0 Preview 6, follow the migrations steps in the ASP.NET Core docs.

Please also see the full list of breaking changes in ASP.NET Core 3.0.

To upgrade an existing ASP.NET Core 3.0 Preview 5 project to Preview 6:

• Update Microsoft.AspNetCore.* package references to 3.0.0-preview6.19307.2
  
  
• In Blazor apps:
  • Rename
    Code:

    @functions
    to
    Code:

    @code
    
    
  • Update Blazor specific attributes and event handlers to use the new directive attribute syntax (see below)
    
    
  • Remove any call to
    Code:

    app.UseBlazor<TStartup>()
    and instead add a call to
    Code:

    app.UseClientSideBlazorFiles<TStartup>()
    before the call to
    Code:

    app.UseRouting()
    . Also add a call to
    Code:

    endpoints.MapFallbackToClientSideBlazor<TStartup>("index.html")
    in the call to
    Code:

    app.UseEndpoints()
    .
    

Before

Code:

app.UseRouting(); app.UseEndpoints(endpoints => { endpoints.MapDefaultControllerRoute(); }); app.UseBlazor<Client.Startup>();

After

Code:

app.UseClientSideBlazorFiles<Client.Startup>(); app.UseRouting(); app.UseEndpoints(endpoints => { endpoints.MapDefaultControllerRoute(); endpoints.MapFallbackToClientSideBlazor<Client.Startup>("index.html"); });

New Razor features

We’ve added support for the following new Razor language features in this release.

Code:

@attribute

The new

Code:

@attribute

directive adds the specified attribute to the generated class.

Code:

@attribute [Authorize]

Code:

@code

The new

Code:

@code

directive is used in .razor files (not supported in .cshtml files) to specify a code block to add to the generated class as additional members. It’s equivalent to

Code:

@functions

, but now with a better name.

Code:

@code { int currentCount = 0; void IncrementCount() { currentCount++; } }

Code:

@key

The new

Code:

@key

directive attribute is used in .razor files to specify a value (any object or unique identifier) that the Blazor diffing algorithm can use to preserve elements or components in a list.

Code:

@foreach (var flight in Flights) { }

To understand why this feature is needed, consider rendering a list of cards with flight details without this feature:

Code:

@foreach (var flight in Flights) { }

If you add a new flight into the middle of the

Code:

Flights

list the existing

Code:

DetailsCard

instances should remain unaffected and one new

Code:

DetailsCard

should be inserted into the rendered output.

To visualize this, if

Code:

Flights

previously contained

Code:

[F0, F1, F2]

, then this is the before state:

• DetailsCard0, with Flight=F0
  
  
• DetailsCard1, with Flight=F1
  
  
• DetailsCard2, with Flight=F2
  

… and this is the desired after state, given we insert a new item

Code:

FNew

at index 1:

• DetailsCard0, with Flight=F0
  
  
• DetailsCardNew, with Flight=FNew
  
  
• DetailsCard1, with Flight=F1
  
  
• DetailsCard2, with Flight=F2
  

However, the actual after state this:

• DetailsCard0, with Flight=F0
  
  
• DetailsCard1, with Flight=FNew
  
  
• DetailsCard2, with Flight=F1
  
  
• DetailsCardNew, with Flight=F2
  

The system has no way to know that DetailsCard2 or DetailsCard3 should preserve their associations with their older Flight instances, so it just re-associates them with whatever Flight matches their position in the list. As a result, DetailsCard1 and DetailsCard2 rebuild themselves completely using new data, which is wasteful and sometimes even leads to user-visible problems (e.g., input focus is unexpectedly lost).

By adding keys using

Code:

@key

the diffing algorithm can associate the old and new elements or components.

Code:

@namespace

Specifies the namespace for the generated class or the namespace prefix when used in an _Imports.razor file. The

Code:

@namespace

directive works today in pages and views (.cshtml) apps, but is now it is also supported with components (.razor).

Code:

@namespace MyNamespace

Markup in

Code:

@functions

and local functions

In views and pages (.cshtml files) you can now add markup inside of methods in the

Code:

@functions

block and in local functions.

Code:

@{ GreetPerson(person); } @functions { void GreetPerson(Person person) { <p>Hello, <em>@person.Name!</em></p> } }

Blazor directive attributes

Blazor uses a variety of attributes for influencing how components get compiled (e.g. ref, bind, event handlers, etc.). These attributes have been added organically to Blazor over time and use different syntaxes. In this Blazor release we’ve standardized on a common syntax for directive attributes. This makes the Razor syntax used by Blazor more consistent and predictable. It also paves the way for future extensibility.

Directive attributes all follow the following syntax where the values in parenthesis are optional:

Code:

@directive(-suffix(:name))(="value")

Some valid examples:

Code:

<!-- directive --> ... <!-- directive with key/value arg--> ... <!-- directive with suffix --> <!-- directive with suffix and key/value arg-->

All of the Blazor built-in directive attributes have been updated to use this new syntax as described below.

Event handlers

Specifying event handlers in Blazor now uses the new directive attribute syntax instead of the normal HTML syntax. The syntax is similar to the HTML syntax, but now with a leading

Code:

@

character. This makes C# event handlers distinct from JS event handlers.

Code:

<button @onclick="@Clicked">Click me!</button>

When specifying a delegate for C# event handler the

Code:

@

prefix is currently still required on the attribute value, but we expect to remove this requirement in a future update.

In the future we also expect to use the directive attribute syntax to support additional features for event handlers. For example, stopping event propagation will likely look something like this (not implemented yet, but it gives you an idea of scenarios now enabled by directive attributes):

Code:

<button @onclick="Clicked" @onclick:stopPropagation>Click me!</button>

Bind

Code:

<input @bind="myValue">...</input> <input @bind="myValue" @bind:format="mm/dd">...</input> <MyButton @bind-Value="myValue">...</MyButton>

Key

Code:

...

Ref

Code:

<button @ref="myButton">...</button>

Authentication & authorization support for Blazor apps

Blazor now has built-in support for handling authentication and authorization. The server-side Blazor template now supports options for enabling all of the standard authentication configurations using ASP.NET Core Identity, Azure AD, and Azure AD B2C. We haven’t updated the Blazor WebAssembly templates to support these options yet, but we plan to do so after .NET Core 3.0 has shipped.

To create a new Blazor app with authentication enabled:

1. Create a new Blazor (server-side) project and select the link to change the authentication configuration. For example, select “Individual User Accounts” and “Store user accounts in-app” to use Blazor with ASP.NET Core Identity:
   
   
2. Run the app. The app includes links in the top row for registering as a new user and logging in.
   
   
3. Select the Register link to register a new user.
   
   
4. Select “Apply Migrations” to apply the ASP.NET Core Identity migrations to the database.
   
   
5. You should now be logged in.
   
   
6. Select your user name to edit your user profile.
   
   

In the Blazor app, authentication and authorization are configured in the

Code:

Startup

class using the standard ASP.NET Core middleware.

Code:

app.UseRouting(); app.UseAuthentication(); app.UseAuthorization(); app.UseEndpoints(endpoints => { endpoints.MapControllers(); endpoints.MapBlazorHub(); endpoints.MapFallbackToPage("/_Host"); });

When using ASP.NET Core Identity all of the identity related UI concerns are handled by the framework provided default identity UI.

Code:

services.AddDefaultIdentity<IdentityUser>() .AddEntityFrameworkStores<ApplicationDbContext>();

The authentication related links in top row of the app are rendered using the new built-in

Code:

AuthorizeView

component, which displays different content depending on the authentication state.

LoginDisplay.razor

Code:

<AuthorizeView> <Authorized> <a href="Identity/Account/Manage">Hello, @context.User.Identity.Name!</a> <a href="Identity/Account/LogOut">Log out</a> </Authorized> <NotAuthorized> <a href="Identity/Account/Register">Register</a> <a href="Identity/Account/Login">Log in</a> </NotAuthorized> </AuthorizeView>

The

Code:

AuthorizeView

component will only display its child content when the user is authorized. Alternatively, the

Code:

AuthorizeView

takes parameters for specifying different templates when the user is

Code:

Authorized

,

Code:

NotAuthorized

, or

Code:

Authorizing

. The current authentication state is passed to these templates through the implicit

Code:

context

parameter. You can also specify specific roles or an authorization policy on the

Code:

AuthorizeView

that the user must satisfy to see the authorized view.

To authorize access to specific pages in a Blazor app, use the normal

Code:

[Authorize]

attribute. You can apply the

Code:

[Authorize]

attribute to a component using the new

Code:

@attribute

directive.

Code:

@using Microsoft.AspNetCore.Authorization @attribute [Authorize] @page "/fetchdata"

To specify what content to display on a page that requires authorization when the user isn’t authorized or is still in the processing of authorizing, use the

Code:

NotAuthorizedContent

and

Code:

AuthorizingContent

parameters on the

Code:

Router

component. These

Code:

Router

parameters are only support in client-side Blazor for this release, but they will be enabled for server-side Blazor in a future update.

The new

Code:

AuthenticationStateProvider

service make the authentication state available to Blazor apps in a uniform way whether they run on the server or client-side in the browser. In server-side Blazor apps the

Code:

AuthenticationStateProvider

surfaces the user from the

Code:

HttpContext

that established the connection to the server. Client-side Blazor apps can configure a custom

Code:

AuthenticationStateProvider

as appropriate for that application. For example, it might retrieve the current user information by querying an endpoint on the server.

The authentication state is made available to the app as a cascading value (

Code:

Task<AuthenticationState>

) using the

Code:

CascadingAuthenticationState

component. This cascading value is then used by the

Code:

AuthorizeView

and

Code:

Router

components to authorize access to specific parts of the UI.

App.razor

Code:

<CascadingAuthenticationState> <Router AppAssembly="typeof(Startup).Assembly"> <NotFoundContent> <p>Sorry, there's nothing at this address.</p> </NotFoundContent> </Router> </CascadingAuthenticationState>

Static assets in Razor class libraries

Razor class libraries can now include static assets like JavaScript, CSS, and images. These static assets can then be included in ASP.NET Core apps by referencing the Razor class library project or via a package reference.

To include static assets in a Razor class library add a wwwroot folder to the Razor class library and include any required files in that folder.

When a Razor class library with static assets is referenced either as a project reference or as a package, the static assets from the library are made available to the app under the path prefix _content/{LIBRARY NAME}/. The static assets stay in their original folders and any changes to the content of static assets in the Razor class libraries are reflected in the app without rebuilding.

When the app is published, the companion assets from all referenced Razor class libraries are copied into the wwwroot folder of the published app under the same prefix.

To try out using static assets from a Razor class library:

1. Create a default ASP.NET Core Web App.
   
   
   Code:

   dotnet new webapp -o WebApp1
   
   
2. Create a Razor class library and reference it from the web app.
   
   
   Code:

   dotnet new razorclasslib -o RazorLib1 dotnet add WebApp1 reference RazorLib1
   
   
3. Add a wwwroot folder to the Razor class library and include a JavaScript file that logs a simple message to the console.
   
   
   Code:

   cd RazorLib1 mkdir wwwroot
   
   hello.js
   
   
   Code:

   console.log("Hello from RazorLib1!");
   
   
4. Reference the script file from Index.cshtml in the web app.
   
   
   Code:

   http://_content/RazorLib1/hello.js
   
   
5. Run the app and look for the output in the browser console.
   
   
   Code:

   Hello from RazorLib1!

Projects now use System.Text.Json by default

New ASP.NET Core projects will now use System.Text.Json for JSON handling by default. In this release we removed Json.NET (Newtonsoft.Json) from the project templates. To enable support for using Json.NET, add the Microsoft.AspNetCore.Mvc.NewtonsoftJson package to your project and add a call to

Code:

AddNewtonsoftJson()

following code in your

Code:

Startup.ConfigureServices

method. For example:

Code:

services.AddMvc() .AddNewtonsoftJson();

Certificate and Kerberos authentication

Preview 6 brings Certificate and Kerberos authentication to ASP.NET Core.

Certificate authentication requires you to configure your server to accept certificates, and then add the authentication middleware in

Code:

Startup.Configure

and the certificate authentication service in

Code:

Startup.ConfigureServices

.

Code:

public void ConfigureServices(IServiceCollection services) { services.AddAuthentication( CertificateAuthenticationDefaults.AuthenticationScheme) .AddCertificate(); // All the other service configuration. } public void Configure(IApplicationBuilder app, IHostingEnvironment env) { app.UseAuthentication(); // All the other app configuration. }

Options for certificate authentication include the ability to accept self-signed certificates, check for certificate revocation, and check that the proffered certificate has the right usage flags in it. A default user principal is constructed from the certificate properties, with an event that enables you to supplement or replace the principal. All the options, and instructions on how to configure common hosts for certificate authentication can be found in the documentation.

We’ve also extended “Windows Authentication” onto Linux and macOS. Previously this authentication type was limited to IIS and HttpSys, but now Kestrel has the ability to use Negotiate, Kerberos, and NTLM on Windows, Linux, and macOS for Windows domain joined hosts by using the Microsoft.AspNetCore.Authentication.Negotiate nuget package. As with the other authentication services you configure authentication app wide, then configure the service:

Code:

public void ConfigureServices(IServiceCollection services) { services.AddAuthentication(NegotiateDefaults.AuthenticationScheme) .AddNegotiate(); } public void Configure(IApplicationBuilder app, IHostingEnvironment env) { app.UseAuthentication(); // All the other app configuration. }

Your host must be configured correctly. Windows hosts must have SPNs added to the user account hosting the application. Linux and macOS machines must be joined to the domain, then SPNs must be created for the web process, as well as keytab files generated and configured on the host machine. Full instructions are given in the documentation.

SignalR Auto-reconnect

This preview release, available now via

Code:

npm install @aspnet/signalr@next

and in the .NET Core SignalR Client, includes a new automatic reconnection feature. With this release we’ve added the

Code:

withAutomaticReconnect()

method to the

Code:

HubConnectionBuilder

. By default, the client will try to reconnect immediately and after 2, 10, and 30 seconds. Enlisting in automatic reconnect is opt-in, but simple via this new method.

Code:

const connection = new signalR.HubConnectionBuilder() .withUrl("/chatHub") .withAutomaticReconnect() .build();

By passing an array of millisecond-based durations to the method, you can be very granular about how your reconnection attempts occur over time.

Code:

.withAutomaticReconnect([0, 3000, 5000, 10000, 15000, 30000]) //.withAutomaticReconnect([0, 2000, 10000, 30000]) yields the default behavior

Or you can pass in an implementation of a custom reconnect policy that gives you full control.

If the reconnection fails after the 30-second point (or whatever you’ve set as your maximum), the client presumes the connection is offline and stops trying to reconnect. During these reconnection attempts you’ll want to update your application UI to provide cues to the user that the reconnection is being attempted.

Reconnection Event Handlers

To make this easier, we’ve expanded the SignalR client API to include

Code:

onreconnecting

and

Code:

onreconnected

event handlers. The first of these handlers,

Code:

onreconnecting

, gives developers a good opportunity to disable UI or to let users know the app is offline.

Code:

connection.onreconnecting((error) => { const status = `Connection lost due to error "${error}". Reconnecting.`; document.getElementById("messageInput").disabled = true; document.getElementById("sendButton").disabled = true; document.getElementById("connectionStatus").innerText = status; });

Likewise, the

Code:

onreconnected

handler gives developers an opportunity to update the UI once the connection is reestablished.

Code:

connection.onreconnected((connectionId) => { const status = `Connection reestablished. Connected.`; document.getElementById("messageInput").disabled = false; document.getElementById("sendButton").disabled = false; document.getElementById("connectionStatus").innerText = status; });

Learn more about customizing and handling reconnection

Automatic reconnect has been partially documented already in the preview release. Check out the deeper docs on the topic, with more examples and details on usage, at https://aka.ms/signalr/auto-reconnect.

Managed gRPC Client

In prior previews, we relied on the

Code:

Grpc.Core

library for client support. The addition of HTTP/2 support in

Code:

HttpClient

in this preview has allowed us to introduce a fully managed gRPC client.

To begin using the new client, add a package reference to

Code:

Grpc.Net.Client

and then you can create a new client.

Code:

var httpClient = new HttpClient() { BaseAddress = new Uri("https://localhost:5001") }; var client = GrpcClient.Create<GreeterClient>(httpClient);

gRPC Client Factory

Building on the opinionated pattern we introduced in

Code:

HttpClientFactory

, we’ve added a gRPC client factory for creating gRPC client instances in your project. There are two flavors of the factory that we’ve added:

Code:

Grpc.Net.ClientFactory

and

Code:

Grpc.AspNetCore.Server.ClientFactory

.

The

Code:

Grpc.Net.ClientFactory

is designed for use in non-ASP.NET app models (such as Worker Services) that still use the

Code:

Microsoft.Extensions.*

primitives without a dependency on ASP.NET Core.

In applications that perform service-to-service communication, we often observe that most servers are also clients that consume other services. In these scenarios, we recommend the use of

Code:

Grpc.AspNetCore.Server.ClientFactory

which features automatic propagation of gRPC deadlines and cancellation tokens.

To use the client factory, add the appropriate package reference to your project (

Code:

Grpc.AspNetCore.Server.Factory

or

Code:

Grpc.Net.ClientFactory

) before adding the following code to

Code:

ConfigureServices()

.

Code:

services .AddGrpcClient<GreeterClient>(options => { options.BaseAddress = new Uri("https://localhost:5001"); });

gRPC Interceptors

gRPC exposes a mechanism to intercept RPC invocations on both the client and the server. Interceptors can be used in conjunction with existing HTTP middleware. Unlike HTTP middleware, interceptors give you access to actual request/response objects before serialization (on the client) and after deserialization (on the server) and vice versa for the response. All middlewares run before interceptors on the request side and vice versa on the response side.

Client interceptors

When used in conjunction with the client factory, you can add a client interceptor as shown below.

Code:

services .AddGrpcClient<GreeterClient>(options => { options.BaseAddress = new Uri("https://localhost:5001"); }) .AddInterceptor<CallbackInterceptor>();

Server interceptors

Server interceptors can be registered in

Code:

ConfigureServices()

as shown below.

Code:

services .AddGrpc(options => { // This registers a global interceptor options.Interceptors.Add<MaxStreamingRequestTimeoutInterceptor>(TimeSpan.FromSeconds(30)); }) .AddServiceOptions<GreeterService>(options => { // This registers an interceptor for the Greeter service options.Interceptors.Add<UnaryCachingInterceptor>(); });

For examples on how to author an interceptors, take a look at these examples in the grpc-dotnet repo.

Give feedback

We hope you enjoy the new features in this preview release of ASP.NET Core and Blazor! Please let us know what you think by filing issues on GitHub.

Thanks for trying out ASP.NET Core and Blazor!

Daniel Roth

Principal Program Manager, ASP.NET

Follow Daniel   https://devblogs.microsoft.com/aspnet/au...th27/feed/