stevenknox / genericapi Goto Github PK

Enable Authorise attribute for Class or Method for All or Selected Controllers.

Currently API Get/Post/Put all work directly against the model.

We should provide the ability to specify an input and/or view model and have dynamic mapping to and from the domain model.

Suggested approach could be to follow convention over configuration and scan the registered assemblies for files suffixed with InputModel.cs or ViewModel.cs.

• Product.cs
• ProductViewModel.cs
• ProductInputModel.cs

If a match for any of the files is found it will use those for Input and ViewModel rather than the Model itself.

We can possibly add a configure method to allow inclusion or exclusion of Models from this convention.

services.AddMvc()
`.AddGenericControllers(options => 
    { 
	EntityAssembly = nameof(StoreWebApi); 
	UseViewModels = true; 
	UseInputModels = true;
	});

app.ConfigureGenericControllers{
    IgnoreViewModelsFor(Model.Orders)
}

Persistence is currently Entity Framework only however when registering services in Startup we should allow the option to select a persistence type such as Entity Framework, RavenDB, InMemory etc

Provide Sanitize attribute that can be enabled/disabled.

Service to Sanitize should be injectable from Startup.cs to allow use of any library such as Ganss.XSS

Child entities don't add or update when aggregate object is added to context.

Shouldnt need to inherit from a base class to avail of dynamic API's. Breaks Open/Closed principal.

• Load Model directly or define VM using convention
• List / Create / Uodate and Delete Actions supported