Security Basics

Add guardrails around EF Core tenant query filters

Explains how tenant query filters help, where they can be bypassed, and what extra safeguards protect tenant isolation.

Apply a partitioned write rate limit

Partitions limits by authenticated user or trusted client address and returns useful 429 retry metadata.

Apply rate limits and abuse throttles to APIs

Explains rate-limit identity, endpoint cost, login and suggestion throttles, Redis counters, user experience, and observability.

ASP.NET Core authentication schemes, challenge, and forbid

Explains how ASP.NET Core schemes select handlers and why authenticate, challenge, and forbid produce different security behavior.

Audit privileged admin actions

Explains why sensitive admin actions need authorization, reason capture, before/after context, and tamper-resistant audit records.

Authenticate service-to-service API calls

Explains API keys, client credentials, managed identity, mTLS, scopes, rotation, and per-client observability.

.NET Full Stack

Full-cycle .NET full-stack interview preparation.

A role-based preparation path covering C#, ASP.NET Core APIs, data access, frontend integration, testing, deployment, system design, real-life scenarios, and behavioral interview topics.

.NET Backend