Concerns on GenHTTP Webserver

Authentication

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Authentication Package on NuGet

The authentication module allows to restrict access to sections provided by handlers to authenticated users only. Independent from the kind of authentication used, the identified user can be read from the request in the following manner:

Client Caching (Policy)

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.ClientCaching Package on NuGet

This concern allows to instruct clients to cache responses generated by the server for some duration by adding the Expires HTTP header. The following example will cause the static website to be cached for one week:

Client Caching (Validation)

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.ClientCaching Package on NuGet

This concern adds an ETag header to every response generated by the server so that clients send a If-None-Match header to validate their cache. If the content did not change on the server, the handler will generate a 304 Not Modified response, causing the client to re-use the locally cached data. This way, clients revisiting your web application load faster and the load on your server is reduced.

Compression

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Compression Package on NuGet

The compression concern compresses content sent to the clients, if applicable. By default, gzip, Brotli and Zstandard (on .NET 11) are supported.

CORS

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Security Package on NuGet

Cross-Origin Resource Sharing allows to control which resources browsers are allowed to access and how they are allowed to do so. For example, if you would like to access a webservice from a website hosted on another domain, the browser will send the Origin header along with requests to the webservice and analyze the response to determine, whether the server allows clients to access the resource from this origin.

Decompression

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Compression Package on NuGet

This concern will analyze incoming requests for compressed content and will automatically decompress the body using a suitable decompression algorithm.

Defaults

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Practices Package on NuGet

The Defaults() method provided by the practices module adds some useful concerns to your web server to enable features such as compression or client side caching. This way, you will have a well configured server instance without the need of adding everything by yourself.

Error Handling

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.ErrorHandling Package on NuGet

If an exception occurs while a request is handled, the server will render the exception into a structured response (JSON, XML, … depending on what the client accepts) via ErrorHandler.Default(), which is an alias for ErrorHandler.Structured(). To customize the serialization used, pass a SerializationBuilder to Structured(...).

Hardening

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Security Package on NuGet

Besides CORS, the security module provides a few concerns that harden a web application against common transport-level issues. All three are added automatically by Defaults() (with preventSniffing off), or can be added together via Harden() (which also enables preventSniffing by default):

Inspection

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.Inspection Package on NuGet

When developing client applications, you will sometimes have trouble to understand, why you are getting a specific response from a webserver. The inspection concern allows you to add the query param ?inspect to any request and will respond with a detailed summary of how the received request looked like and what response was generated by the server.

Localization

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.I18n Package on NuGet

The localization concern analyzes incoming requests for language preferences and allows the application logic to serve content based on those.

Open API

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.OpenApi Package on NuGet

This concern dynamically generates and serves an Open API v3 specification using NSwag for all detected API endpoints.

Range Support

Mon, 01 Jan 0001 00:00:00 +0000

GenHTTP.Modules.IO Package on NuGet

Partial responses allow clients to fetch a specified portion of a requested resource which can be helpful for download managers to pause and resume downloads. As this functionality is not needed by every web application, range support is disabled by default.