This project is an example of architecture using new technologies and best practices.
The goal is to share knowledge and use it to create new projects.
Thanks for enjoying!
- .NET Core 2.2
- ASP.NET Core 2.2
- Entity Framework Core 2.2
- C# 7.3
- Angular 8.2
- Typescript 3.5.3
- HTML
- CSS
- SASS
- UIkit
- JWT
- Swagger
- FluentValidation
- Scrutor
- Serilog
- Docker
- Azure DevOps
- Clean Code
- SOLID Principles
- DDD (Domain-Driven Design)
- Code Analysis
- Inversion of Control
- Unit of Work Pattern
- Repository Pattern
- Database Migrations
- Authentication
- Authorization
- Performance
- Logging
- DevOps
- .NET Core 3.0
- ASP.NET Core 3.0
- Entity Framework Core 3.0
- C# 8
Command Line
- Open directory source\Web\Frontend in command line and execute npm run restore.
- Open directory source\Web in command line and execute dotnet run.
- Open https://localhost:8090.
Visual Studio Code
- Open directory source\Web\Frontend in command line and execute npm run restore.
- Open source directory in Visual Studio Code.
- Press F5.
Visual Studio
- Open directory source\Web\Frontend in command line and execute npm run restore.
- Open source\DotNetCoreArchitecture.sln in Visual Studio.
- Set DotNetCoreArchitecture.Web as startup project.
- Press F5.
Docker
- Execute docker-compose up --build -d --force-recreate in root directory.
- Open http://localhost:8095.
Considerations
Some features and practices were made to facilitate learning and make the architecture as small as possible. For a real project, consider the following:
- Do not use technologies and features that are not necessary.
- Use DDD concepts, such as ubiquitous language, to express the domain.
- Use Identity Server for authentication and authorization.
- Separate ASP.NET Core API and Angular in different projects.
- Apply CQRS with two databases (reading and writing) if the main purpose is performance.
- Apply SignalR for real-time communication, avoid calls every x time.
- Apply a message broker, such as RabbitMQ, for asynchronous and parallel processing.
Books
- Clean Code: A Handbook of Agile Software Craftsmanship - Robert C. Martin (Uncle Bob)
- Clean Architecture: A Craftsman's Guide to Software Structure and Design - Robert C. Martin (Uncle Bob)
- Domain-Driven Design: Tackling Complexity in the Heart of Software - Eric Evans
- Domain-Driven Design Reference: Definitions and Pattern Summaries - Eric Evans
- Implementing Domain-Driven Design - Vaughn Vernon
- Domain-Driven Design Distilled - Vaughn Vernon
Visual Studio Code Extensions
Packages were created to make this architecture clean of common features for any solution.
Source: https://github.com/rafaelfgx/DotNetCore
Published: https://www.nuget.org/profiles/rafaelfgx
Web: Contains API (ASP.NET Core) and Frontend App (Angular).
Application: Responsible for flow control.
Domain: Contains business rules and domain logic.
Model: Contains objects such as enums and models.
Database: Isolates and abstracts data persistence.
CrossCutting: Provides generic features.
The Component class is responsible for being a small part of the application.
It must be as simple and small as possible.
@Component({ selector: "app-login", templateUrl: "./login.component.html" })
export class AppLoginComponent {
form = this.formBuilder.group({
login: ["", Validators.required],
password: ["", Validators.required]
});
constructor(
private readonly formBuilder: FormBuilder,
private readonly appUserService: AppUserService) {
}
signIn() {
this.appUserService.signIn(this.form.value);
}
}
<form [formGroup]="form">
<fieldset>
<div>
<app-label for="login" text="Login"></app-label>
<app-input-text formControlName="login" text="Login" [autofocus]="true"></app-input-text>
</div>
<div>
<app-label for="password" text="Password"></app-label>
<app-input-password formControlName="password" text="Password"></app-input-password>
</div>
<div>
<app-button text="Sign in" [disabled]="form.invalid" (click)="signIn()"></app-button>
</div>
</fieldset>
</form>
The Model class is responsible for containing a set of data.
export class SignInModel {
login!: string;
password!: string;
}
The Service class is responsible for accessing the API or containing logic that does not belong to component.
@Injectable({ providedIn: "root" })
export class AppUserService {
constructor(
private readonly http: HttpClient,
private readonly router: Router,
private readonly appTokenService: AppTokenService) { }
add(addUserModel: AddUserModel) {
return this.http.post<number>(`Users`, addUserModel);
}
delete(userId: number) {
return this.http.delete(`Users/${userId}`);
}
list() {
return this.http.get<UserModel[]>(`Users`);
}
select(userId: number) {
return this.http.get<UserModel>(`Users/${userId}`);
}
signIn(signInModel: SignInModel): void {
this.http
.post<TokenModel>(`Users/SignIn`, signInModel)
.subscribe((tokenModel) => {
if (!tokenModel || !tokenModel.token) { return; }
this.appTokenService.set(tokenModel.token);
this.router.navigate(["/main/home"]);
});
}
signOut() {
if (this.appTokenService.any()) {
this.http.post(`Users/SignOut`, {}).subscribe();
}
this.appTokenService.clear();
this.router.navigate(["/login"]);
}
update(updateUserModel: UpdateUserModel) {
return this.http.put(`Users/${updateUserModel.userId}`, updateUserModel);
}
}
The Guard class is responsible for route security.
@Injectable({ providedIn: "root" })
export class AppRouteGuard implements CanActivate {
constructor(
private readonly router: Router,
private readonly appTokenService: AppTokenService) { }
canActivate() {
if (this.appTokenService.any()) { return true; }
this.router.navigate(["/login"]);
return false;
}
}
The ErrorHandler class is responsible for centralizing the management of all errors and exceptions.
@Injectable({ providedIn: "root" })
export class AppErrorHandler implements ErrorHandler {
constructor(private readonly injector: Injector) { }
handleError(error: any) {
if (error instanceof HttpErrorResponse) {
switch (error.status) {
case 401: {
const router = this.injector.get<Router>(Router);
router.navigate(["/login"]);
return;
}
case 422: {
const appModalService = this.injector.get<AppModalService>(AppModalService);
appModalService.alert(error.error);
return;
}
}
}
console.error(error);
}
}
The HttpInterceptor class is responsible for intercepting request and response.
This interceptor adds JWT to header for every request.
@Injectable({ providedIn: "root" })
export class AppHttpInterceptor implements HttpInterceptor {
constructor(private readonly appTokenService: AppTokenService) { }
intercept(request: HttpRequest<any>, next: HttpHandler) {
request = request.clone({
setHeaders: { Authorization: `Bearer ${this.appTokenService.get()}` }
});
return next.handle(request);
}
}
The Routes constant is responsible for registering all lazy load routes.
Angular 8 introduced a new way of registering routes. Using imports, IDEs can validate paths and modules.
export const routes: Routes = [
{
path: "",
component: AppParentComponent
children: [
{ path: "view1", loadChildren: () => import("./views/view1/view1.module").then((module) => module.AppView1Module) },
{ path: "view2", loadChildren: () => import("./views/view2/view2.module").then((module) => module.AppView2Module) },
],
}
];
Documentation generated by Swagger:
https://localhost:8090/swagger
Import "postman.json" file into Postman.
The Startup class is responsible for configuring the API.
public class Startup
{
public void Configure(IApplicationBuilder application)
{
application.UseExceptionMiddleware();
application.UseCorsAllowAny();
application.UseHttps();
application.UseAuthentication();
application.UseResponseCompression();
application.UseResponseCaching();
application.UseStaticFiles();
application.UseMvcWithDefaultRoute();
application.UseHealthChecks();
application.UseSwaggerDefault();
application.UseSpa();
}
public void ConfigureServices(IServiceCollection services)
{
services.AddConfiguration();
services.AddLogger();
services.AddCors();
services.AddJsonWebToken();
services.AddHash();
services.AddAuthenticationJwtBearer();
services.AddResponseCompression();
services.AddResponseCaching();
services.AddMvcDefault();
services.AddHealthChecks();
services.AddSwaggerDefault();
services.AddSpa();
services.AddFileService();
services.AddApplicationServices();
services.AddDomainServices();
services.AddDatabaseServices();
services.AddContext();
}
}
The Extensions class is responsible for adding and configuring services for dependency injection.
public static class Extensions
{
public static void AddApplicationServices(this IServiceCollection services)
{
services.AddMatchingInterface(typeof(IUserApplicationService).Assembly);
}
public static void AddContext(this IServiceCollection services)
{
var configuration = services.BuildServiceProvider().GetRequiredService<IConfiguration>();
var connectionString = configuration.GetConnectionString(nameof(Context));
services.AddDbContextMigrate<Context>(x => x.ConfigureWarningsAsErrors().UseSqlServer(connectionString));
}
public static void AddDatabaseServices(this IServiceCollection services)
{
services.AddMatchingInterface(typeof(IUnitOfWork).Assembly);
}
public static void AddDomainServices(this IServiceCollection services)
{
services.AddMatchingInterface(typeof(IUserDomainService).Assembly);
}
public static void AddHash(this IServiceCollection services)
{
services.AddHash(10000, 128);
}
public static void AddJsonWebToken(this IServiceCollection services)
{
services.AddJsonWebToken(Guid.NewGuid().ToString(), TimeSpan.FromHours(12));
}
public static void AddSpa(this IServiceCollection services)
{
services.AddSpaStaticFiles("Frontend/dist");
}
public static void UseHealthChecks(this IApplicationBuilder application)
{
application.UseHealthChecks("/health");
}
public static void UseSpa(this IApplicationBuilder application)
{
application.UseSpaAngularServer("Frontend", "development");
}
}
The Controller class is responsible for receiving, processing, and responding requests.
It must be as simple and small as possible, without any rule or logic.
[ApiController]
[RouteController]
public class UsersController : BaseController
{
public UsersController(IUserApplicationService userApplicationService)
{
UserApplicationService = userApplicationService;
}
private IUserApplicationService UserApplicationService { get; }
[HttpPost]
public async Task<IActionResult> AddAsync(AddUserModel addUserModel)
{
return Result(await UserApplicationService.AddAsync(addUserModel));
}
[AuthorizeEnum(Roles.Admin)]
[HttpDelete("{userId}")]
public async Task<IActionResult> DeleteAsync(long userId)
{
return Result(await UserApplicationService.DeleteAsync(userId));
}
[HttpGet("Grid")]
public async Task<PagedList<UserModel>> GridAsync([FromQuery]PagedListParameters parameters)
{
return await UserApplicationService.ListAsync(parameters);
}
[HttpPatch("{userId}/Inactivate")]
public async Task InactivateAsync(long userId)
{
await UserApplicationService.InactivateAsync(userId);
}
[HttpGet]
public async Task<IEnumerable<UserModel>> ListAsync()
{
return await UserApplicationService.ListAsync();
}
[HttpGet("{userId}")]
public async Task<UserModel> SelectAsync(long userId)
{
return await UserApplicationService.SelectAsync(userId);
}
[AllowAnonymous]
[HttpPost("SignIn")]
public async Task<IActionResult> SignInAsync(SignInModel signInModel)
{
return Result(await UserApplicationService.SignInAsync(signInModel));
}
[HttpPost("SignOut")]
public Task SignOutAsync()
{
return UserApplicationService.SignOutAsync(new SignOutModel(UserModel.UserId));
}
[HttpPut("{userId}")]
public async Task<IActionResult> UpdateAsync(UpdateUserModel updateUserModel)
{
return Result(await UserApplicationService.UpdateAsync(updateUserModel));
}
}
The ApplicationService class is responsible for flow control. It uses validator, factory, domain, repository and unit of work, but it does not contain business rules or domain logic.
public sealed class UserApplicationService : IUserApplicationService
{
public UserApplicationService
(
IUnitOfWork unitOfWork,
IUserDomainService userDomainService,
IUserLogApplicationService userLogApplicationService,
IUserRepository userRepository
)
{
UnitOfWork = unitOfWork;
UserDomainService = userDomainService;
UserLogApplicationService = userLogApplicationService;
UserRepository = userRepository;
}
private IUnitOfWork UnitOfWork { get; }
private IUserDomainService UserDomainService { get; }
private IUserLogApplicationService UserLogApplicationService { get; }
private IUserRepository UserRepository { get; }
public async Task<IDataResult<long>> AddAsync(AddUserModel addUserModel)
{
var validation = new AddUserModelValidator().Valid(addUserModel);
if (!validation.Success)
{
return new ErrorDataResult<long>(validation.Message);
}
addUserModel.SignIn = UserDomainService.CreateSignIn(addUserModel.SignIn);
var userEntity = UserEntityFactory.Create(addUserModel);
userEntity.Add();
await UserRepository.AddAsync(userEntity);
await UnitOfWork.SaveChangesAsync();
return new SuccessDataResult<long>(userEntity.UserId);
}
public async Task<IResult> DeleteAsync(long userId)
{
await UserRepository.DeleteAsync(userId);
await UnitOfWork.SaveChangesAsync();
return new SuccessResult();
}
public async Task InactivateAsync(long userId)
{
var userEntity = UserEntityFactory.Create(userId);
userEntity.Inactivate();
await UserRepository.UpdateStatusAsync(userEntity);
await UnitOfWork.SaveChangesAsync();
}
public async Task<PagedList<UserModel>> ListAsync(PagedListParameters parameters)
{
return await UserRepository.ListAsync<UserModel>(parameters);
}
public async Task<IEnumerable<UserModel>> ListAsync()
{
return await UserRepository.ListAsync<UserModel>();
}
public async Task<UserModel> SelectAsync(long userId)
{
return await UserRepository.SelectAsync<UserModel>(userId);
}
public async Task<IDataResult<TokenModel>> SignInAsync(SignInModel signInModel)
{
var validation = new SignInModelValidator().Valid(signInModel);
if (!validation.Success)
{
return new ErrorDataResult<TokenModel>(validation.Message);
}
var signedInModel = await UserRepository.SignInAsync(signInModel);
if (!UserDomainService.Validate(signedInModel, signInModel))
{
return new ErrorDataResult<TokenModel>(Texts.LoginPasswordInvalid);
}
var tokenModel = UserDomainService.CreateToken(signedInModel);
var addUserLogModel = new AddUserLogModel(signedInModel.UserId, LogType.SignIn);
await UserLogApplicationService.AddAsync(addUserLogModel);
await UnitOfWork.SaveChangesAsync();
return new SuccessDataResult<TokenModel>(tokenModel);
}
public async Task SignOutAsync(SignOutModel signOutModel)
{
var addUserLogModel = new AddUserLogModel(signOutModel.UserId, LogType.SignOut);
await UserLogApplicationService.AddAsync(addUserLogModel);
await UnitOfWork.SaveChangesAsync();
}
public async Task<IResult> UpdateAsync(UpdateUserModel updateUserModel)
{
var validation = new UpdateUserModelValidator().Valid(updateUserModel);
if (!validation.Success)
{
return new ErrorResult(validation.Message);
}
var userEntity = await UserRepository.SelectAsync(updateUserModel.UserId);
if (userEntity == default)
{
return new SuccessResult();
}
userEntity.ChangeEmail(updateUserModel.Email);
userEntity.ChangeFullName(updateUserModel.FullName.Name, updateUserModel.FullName.Surname);
await UserRepository.UpdateAsync(userEntity.UserId, userEntity);
await UnitOfWork.SaveChangesAsync();
return new SuccessResult();
}
}
The Entity class is responsible for business rules and domain logic.
It must have an identity.
Property values must be assigned in the constructor and only be changed by methods.
public class UserEntity
{
public UserEntity
(
long userId,
FullName fullName,
Email email,
SignIn signIn,
Roles roles,
Status status
)
{
UserId = userId;
FullName = fullName;
Email = email;
SignIn = signIn;
Roles = roles;
Status = status;
}
public UserEntity(long userId)
{
UserId = userId;
}
public long UserId { get; private set; }
public FullName FullName { get; private set; }
public Email Email { get; private set; }
public SignIn SignIn { get; private set; }
public Roles Roles { get; private set; }
public Status Status { get; private set; }
public ICollection<UserLogEntity> UsersLogs { get; private set; }
public void Add()
{
UserId = default;
Roles = Roles.User;
Status = Status.Active;
}
public void ChangeEmail(string address)
{
Email = new Email(address);
}
public void ChangeFullName(string name, string surname)
{
FullName = new FullName(name, surname);
}
public void Inactivate()
{
Status = Status.Inactive;
}
}
The EntityFactory class is responsible for creating the entity.
Using a factory, any change to instantiate the entity has only one place to modify.
public static class UserEntityFactory
{
public static UserEntity Create(long userId)
{
return new UserEntity(userId);
}
public static UserEntity Create(AddUserModel addUserModel)
{
return new UserEntity
(
addUserModel.UserId,
new FullName
(
addUserModel.FullName.Name,
addUserModel.FullName.Surname
),
new Email(addUserModel.Email),
new SignIn
(
addUserModel.SignIn.Login,
addUserModel.SignIn.Password,
addUserModel.SignIn.Salt
),
addUserModel.Roles,
default
);
}
}
The ValueObject class is responsible for grouping data that adds value to entity.
It must have no identity.
Property values must be assigned in the constructor and be immutable.
public sealed class SignIn
{
public SignIn(string login, string password, string salt)
{
Login = login;
Password = password;
Salt = salt;
}
public string Login { get; private set; }
public string Password { get; private set; }
public string Salt { get; private set; }
}
The DomainService class is responsible for encapsulating domain logic that does not fit within the entity.
public class UserDomainService : IUserDomainService
{
public UserDomainService
(
IHash hash,
IJsonWebToken jsonWebToken
)
{
Hash = hash;
JsonWebToken = jsonWebToken;
}
private IHash Hash { get; }
private IJsonWebToken JsonWebToken { get; }
public SignInModel CreateSignIn(SignInModel signInModel)
{
var salt = Guid.NewGuid().ToString();
var password = Hash.Create(signInModel.Password, salt);
return new SignInModel
{
Login = signInModel.Login,
Password = password,
Salt = salt
};
}
public TokenModel CreateToken(SignedInModel signedInModel)
{
var claims = new List<Claim>();
claims.AddSub(signedInModel.UserId.ToString());
claims.AddRoles(signedInModel.Roles.ToString().Split(", "));
return new TokenModel(JsonWebToken.Encode(claims));
}
public bool Validate(SignedInModel signedInModel, SignInModel signInModel)
{
if (signedInModel == default || signInModel == default) { return false; }
var password = Hash.Create(signInModel.Password, signedInModel.SignIn.Salt);
return signedInModel.SignIn.Password == password;
}
}
The Model class is responsible for containing a set of data.
public class SignInModel
{
public string Login { get; set; }
public string Password { get; set; }
public string Salt { get; set; }
}
The ModelValidator class is responsible for validating the model with defined rules and messages.
public sealed class SignInModelValidator : Validator<SignInModel>
{
public SignInModelValidator()
{
WithMessage(Texts.LoginPasswordInvalid);
RuleFor(x => x.Login).NotEmpty();
RuleFor(x => x.Password).NotEmpty();
}
}
The Enum is responsible for being a set of named integer constants.
public enum Status
{
None = 0,
Active = 1,
Inactive = 2
}
The Context class is responsible for configuring and mapping the database.
public sealed class Context : DbContext
{
public Context(DbContextOptions options) : base(options) { }
protected override void OnModelCreating(ModelBuilder builder)
{
builder.ApplyConfigurationsFromAssembly();
builder.Seed();
}
}
The ContextFactory class is responsible for generating Entity Framework Core Migrations.
When the entity model is changed, a new migration must be generated.
Then the application is executed and the database is updated automatically.
public sealed class ContextFactory : IDesignTimeDbContextFactory<Context>
{
public Context CreateDbContext(string[] args)
{
var builder = new DbContextOptionsBuilder<Context>();
builder.UseSqlServer("Server=(localdb)\\MSSQLLocalDB;Database=Database;");
return new Context(builder.Options);
}
}
The ContextSeed class is responsible for seeding initial data.
public static class ContextSeed
{
public static void Seed(this ModelBuilder builder)
{
builder.SeedUsers();
}
private static void SeedUsers(this ModelBuilder builder)
{
builder.Entity<UserEntity>(x =>
{
x.HasData(new
{
UserId = 1L,
Roles = Roles.User | Roles.Admin,
Status = Status.Active
});
x.OwnsOne(y => y.FullName).HasData(new
{
UserEntityUserId = 1L,
Name = "Administrator",
Surname = "Administrator"
});
x.OwnsOne(y => y.Email).HasData(new
{
UserEntityUserId = 1L,
Address = "[email protected]"
});
});
}
}
The UnitOfWork class is responsible for managing database transactions.
public sealed class UnitOfWork : IUnitOfWork
{
public UnitOfWork(Context context)
{
Context = context;
}
private Context Context { get; }
public Task<int> SaveChangesAsync()
{
return Context.SaveChangesAsync();
}
}
The EntityConfiguration class is responsible for configuring and mapping the entity to table.
public sealed class UserEntityConfiguration : IEntityTypeConfiguration<UserEntity>
{
public void Configure(EntityTypeBuilder<UserEntity> builder)
{
builder.ToTable("Users", "User");
builder.HasKey(x => x.UserId);
builder.Property(x => x.UserId).IsRequired().ValueGeneratedOnAdd();
builder.Property(x => x.Roles).IsRequired();
builder.Property(x => x.Status).IsRequired();
builder.OwnsOne(x => x.FullName, y =>
{
y.Property(x => x.Name).HasColumnName(nameof(UserEntity.FullName.Name)).IsRequired().HasMaxLength(100);
y.Property(x => x.Surname).HasColumnName(nameof(UserEntity.FullName.Surname)).IsRequired().HasMaxLength(200);
});
builder.OwnsOne(x => x.Email, y =>
{
y.Property(x => x.Address).HasColumnName(nameof(UserEntity.Email)).IsRequired().HasMaxLength(300);
y.HasIndex(x => x.Address).IsUnique();
});
builder.OwnsOne(x => x.SignIn, y =>
{
y.Property(x => x.Login).HasColumnName(nameof(UserEntity.SignIn.Login)).IsRequired().HasMaxLength(100);
y.Property(x => x.Password).HasColumnName(nameof(UserEntity.SignIn.Password)).IsRequired().HasMaxLength(500);
y.Property(x => x.Salt).HasColumnName(nameof(UserEntity.SignIn.Salt)).IsRequired().HasMaxLength(500);
y.HasIndex(x => x.Login).IsUnique();
});
builder.HasMany(x => x.UsersLogs).WithOne(x => x.User).HasForeignKey(x => x.UserId);
}
}
The Repository class is responsible for abstracting and isolating data persistence.
The Entity Framework Core already implements repository and unit of work patterns.
But using a repository has some benefits:
- Ensures separation of concepts.
- Ensures naming convention for common methods.
- Removes redundancy of common implementations.
- Removes dependency of persistance technology.
- Increases testability.
public sealed class UserRepository : EntityFrameworkCoreRelationalRepository<UserEntity>, IUserRepository
{
public UserRepository(Context context) : base(context) { }
public Task<SignedInModel> SignInAsync(SignInModel signInModel)
{
return SingleOrDefaultAsync<SignedInModel>
(
userEntity =>
userEntity.SignIn.Login == signInModel.Login &&
userEntity.Status == Status.Active
);
}
public Task UpdateStatusAsync(UserEntity userEntity)
{
return UpdatePartialAsync(userEntity.UserId, new { userEntity.Status });
}
}