Forem: Rod Falanga

I don't understand why my Minimal API doesn't bring up swagger

Rod Falanga — Fri, 17 Oct 2025 22:41:23 +0000

I have a Blazor Web Application I've been working on (Visual Studio 2022 and .NET 9). This application had 4 VS projects in the solutions, one of them was a Minimal API app. Due to problems I encountered with that configuration, I have decided to migrate the Minimal API project out of that VS solution, into a new VS solution that has only one VS project, which is the Minimal API from the other VS solution.

However, I've found that when debugging the new VS solution it does not bring up Swagger. I've tried using GitHub Copilot, but that just resulted in following Copilot running along a rabbit trail. So, I'm posting the Program.cs file from the new VS solution. Please review and tell me what I'm doing wrong.

using AutoMapper;
using Azure.Identity;
using Azure.Extensions.AspNetCore.Configuration.Secrets;
using FPTimetrackCore.DataActionsAPI;
using FPTimetrackCore.DataActionsAPI.DTO;
using FPTimetrackCore.DataActionsAPI.Model;
using Microsoft.EntityFrameworkCore;
using System.Linq;
using System.Net;
using System;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Configuration;
using Microsoft.OpenApi.Models;

var builder = WebApplication.CreateBuilder(args);

// -- Key Vault Configuration --
var isDev = builder.Environment.IsDevelopment();
var vaultUri = Environment.GetEnvironmentVariable("VaultUri");

if(!isDev && !string.IsNullOrWhiteSpace(vaultUri))
{
    builder.Configuration.AddAzureKeyVault(new Uri(vaultUri), new DefaultAzureCredential());
}

builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen(c =>
{
    c.SwaggerDoc("v1", new OpenApiInfo
    {
        Title = "FPTimetrackCore.DataActionsAPI",
        Version = "v1"
    });
});
builder.Services.AddAutoMapper(typeof(MappingConfig));


builder.Configuration.AddAzureKeyVault(
    new Uri($"https://this.is.not.real/"),
    new DefaultAzureCredential());

var app = builder.Build();

// Configure the HTTP request pipeline.
if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI(c =>
    {
        c.SwaggerEndpoint("/swagger/v1/swagger.json", "FPTimetrackCore.DataActionsAPI v1");
    });
}

app.UseHttpsRedirection();

static SaveData GetConnectionObject(bool prodConn)
{
    IConfiguration configuration = null;
    if (prodConn)   // Is this really the best way to do this?
    {
        configuration = new ConfigurationBuilder()
            .AddJsonFile("appsettings.json")
            .AddEnvironmentVariables()
            .Build();
    }
    else
    {
        configuration = new ConfigurationBuilder()
            .AddJsonFile("appsettings.Development.json")
            .AddEnvironmentVariables()
            .Build();
    }
    var lib = new SaveData(configuration);
    return lib;
}

// Configure the HTTP request pipeline.
if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI(c =>
    {
        c.SwaggerEndpoint("/swagger/v1/swagger.json", "FPTimetrackCore.API v1");
    });
}

const int MAX_MONTHS = -3; // This is the number of months to go back from today, from the original Family Planning Timetrack application.

app.MapGet("/api/getphdusers/{prodConn}/{Active}", (IConfiguration _config, IMapper _mapper, bool prodConn = true, bool Active = true) =>
{
    TimetrackContext ctx = GetDbContext(_config, prodConn);
    IQueryable<PhdUser> phdUsers = null;
    if (Active)
    {
        phdUsers = ctx.PhdUsers.Where(a => a.PhdUserStatus == "Active");
    }
    else
    {
        phdUsers = ctx.PhdUsers;
    }
    IOrderedQueryable<PhdUser> users = phdUsers.OrderBy(o => o.PhdUserName);
    var phdUserArray = users.ToArray();
    var PhdUsersDTOArray = _mapper.Map<PhdUserDTO[]>(phdUserArray);
    APIResponse response = new()
    {
        IsSuccess = true,
        Result = PhdUsersDTOArray,
        StatusCode = System.Net.HttpStatusCode.OK
    };
    return Results.Ok(response);
})
    .WithName("GetPhdUsers")
    .WithOpenApi()
    .Produces<APIResponse>(StatusCodes.Status200OK);

// Other endpoints go here, but omitted for brevity.

app.Run();

Can Minimal APIs use trusted connections?

Rod Falanga — Sat, 30 Aug 2025 00:06:42 +0000

(Note: I tried, 6 times to post this question to Microsoft Q&A, but it refused to allow me to post it. So, I'm posting it here. I hope this is the correct place. I am still new to Dev.To, so if this is wrong, please forgive me and direct me to where I should post it.)

I'm working on an ASP.NET Blazor app I created using .NET 9 and the Blazor Web App template (I believe that's the correct name; it's been some months ago). It created a Blazor application with a server-side Blazor project and a Blazor WebAssembly project. To that Visual Studio I added a third project, which is a Minimal API project.

I've been having problems making the Minimal API project access an Azure Key Vault I created two years ago. In the key vault I added connection strings for our test and production databases in Secrets. I would much rather use Azure Key Vault because it is much more secure than using appsettings*.json files where the connection strings would be saved in plain text. However, I've been struggling with this for a few weeks, and my management wants to see some progress.

One of my colleagues has recommended that we drop Azure Key Vault entirely and just use connection string hard coded in the C# code. I don't like this idea, but under the circumstances it might be necessary. Nevertheless, I did think of a couple of potential problems. One is the SQL Server database was configured years ago to only use SQL Authentication. Thus, the reason I wanted to store the connection string as securely as possible.

The second possible problem is an additional idea my colleague had, which is to use what we've used for years when writing ASP.NET MVC apps (and WPF/WinForms apps) and that is trusted connections. Certainly, that would eliminate storing database connection strings in source code. But I'm not sure that .NET Minimal APIs can work with trusted connections. So, I searched for that and came across this link. That link, to me, suggests that Minimal APIs cannot work with trusted connections. I'd like to know if I'm correct, please.

Is it possible for someone to replace Git history, without doing it destructively?

Rod Falanga — Fri, 25 Jul 2025 02:01:44 +0000

At work I suspect that one person destructively deleted Git history on a repo I created on GitHub, back in February. However, I'm wondering if the same action might be possible without being intentionally destructive?

Here's the situation. Back in February, I created a new repo in our GitHub Organization for some developers, one of them being this person. Our practice, for a few years, has been to call the default branch name main. So, that's what I did, following our precedent. This guy asked me to rename the default branch name to master. I know that historically master is the default branch name for a new Git repo. So, I thought perhaps this guy is just used to doing that. (He's new to our organization and he's a contractor.) So, I acquiesced and renamed the default branch from main to master. Before changing the default branch name, I had made a few commits. I think maybe others on the team may also have made some commits to this new repo. Later I noticed that there was both a main branch, and a master branch, in the repo. I thought it odd, but other demands of my job took my attention.

Today, while working on some GitHub Actions/Workflows in that repo, I noticed some odd behavior. Most of the time I am in the master branch, or some child branch of master. I issued a git switch into main, just to see what was there. In the GitHub.com interface it looked empty. But after switching to main, Git spent a lot of time fetching files from somewhere, which was very odd. Switching back to master, Git did the same thing. So, then I issued a git log to get the full history, in the main branch and the master branch. In the main branch I discovered when I created the repo in the first place with those commits I did to the main branch. In the master branch, the first commit was by this contractor some 3 hours later.

I know that it is possible to rewrite git history with a hard reset. I also know you can issue a git push origin --force, to destroy git history. I suspect this guy did one of those, probably the git push --force, but before I bring this to anyone else's attention, I'd like to know if it is possible for someone to rewrite Git history "innocently"?