ASP.NET Core Web API Tutorial

Make the API accept and return snake_case JSON (customer_id, gift_message) instead of camelCase.

Create an UpdatePriceDto (only Price, between 1 and 1,000,000) and a PATCH /api/products/{id}/price action that changes only the price.

Customise the automatic 400 response so it also includes an "errorCount" extension with the number of invalid fields.

Inject the express calculator directly into an action with [FromKeyedServices("express")] and return its cost for 1 kg.

Add an ErrorType.Forbidden mapped to 403 and a service rule: products with id over 100 are “staff only” and cannot be reserved by customers.

Add GET /api/orders/{id} that returns { id, email, total } using ExecuteReaderAsync, or 404 when the order does not exist.

Add DELETE /api/products/discontinued that deletes every product with Stock == 0 using ExecuteDeleteAsync and returns { deleted }.

Make the health endpoint return JSON like {"status":"Healthy","checks":{"database":"Healthy"}} using HealthCheckOptions.ResponseWriter.

Call usp_GetProductsByCategory with plain ADO.NET (CommandType.StoredProcedure) and return the product names.

Add GET /api/products/search?name=key that returns products whose name contains the search text.

Add an X-Total-Count response header to the offset endpoint so clients that ignore the body can read the total.

Allow sorting by "stock" too, and add a filter ?names=Mouse Pad&names=USB-C Hub that returns only those products.

Change the search so every word must match: q="usb hub" returns products whose name or description contains both “usb” and “hub”.

Make the handler map OperationCanceledException (client disconnected) to status 499 without logging it as an error, and return true without writing a body.

Wrap the order-placing code in a log scope with OrderId so every log line inside it carries that field, and enable IncludeScopes on the JSON console formatter.

Add the Scalar interactive UI in Development only, available at /scalar/v1.

Add a [Authorize] GET /api/orders/mine endpoint that returns the caller’s user id from the sub claim, and returns 401 for anonymous callers.

Add a policy "ReadReports" that requires the claim scope=reports:read, and use it on GET /api/reports.

Read the allowed origins from configuration (Cors:Origins array) instead of hard-coding them.

Add a v2-only endpoint GET /api/v2/products/{id}/reviews that does not exist in v1.

Add a fixed-window policy "login" that allows 5 requests per minute per IP address and apply it to POST /api/auth/login.

Allow uploading several images at once with IFormFileCollection and return the count of accepted files (skip non-JPEGs).

Write curl commands that create a product, print the response headers, and then delete the product using its id.

Add a Theory row proving that a gold customer buying 1 item at ₹999.99 pays ₹849.99 (rounded to 2 decimals).

Add a test that posts a product with a 101-character name and asserts a 400 response with an error for Name.

Add a "Product" output-cache policy that varies by the id route value and expires after 2 minutes, and use it on GET /api/products/{id}.

Let staff (role Support) read any order while customers can still only read their own. Return 404 for customers reading other orders.

Write a docker-compose.yml that starts SQL Server and the API, waits for SQL Server to be healthy, and maps the API to port 5080.

Write a GitHub Actions workflow that builds the API on push to main and deploys it to the staging slot with azure/webapps-deploy.

Add a deleteProduct(id) function to api.ts and a Delete button per product that removes it from the list after a 204.

Add a delete(id) method to ProductService and a Delete button in the list that removes the product from the products signal after success.