Introduction

Every modern application, whether a web front end, a mobile app, or a fleet of microservices, lives or dies by the APIs behind it. ASP.NET 10 Minimal APIs give you the fastest, leanest way to build them, and this full-day, hands-on workshop shows you how to do it right from the first line of code to the moment you ship.

You will start with a clean development environment and build a complete RESTful API from the ground up. Along the way you will design clear, resource-oriented endpoints; model your data and implement full CRUD with EF Core; lock the API down with JWT authentication, role- and policy-based authorization, and the security practices OWASP recommends; and finish by adding output caching, automated tests, and OpenAPI tooling so your API is fast, verifiable, and ready for production. We close by running the day's work under .NET Aspire, building a container image, and looking at the path to the cloud.

This is a workshop, not a lecture. Every module pairs core concepts with a guided lab, so you leave with a working codebase, patterns you can reuse on Monday morning, and feedback from an experienced instructor and your fellow developers.

How the day is designed

One product, built end to end. You build a single API all day: Roastery, an ordering service for a small coffee roaster. That shape was chosen deliberately. It gives a natural reason for every topic of the day: a public, read-heavy menu to cache; an authenticated write path for orders; two roles that need different permissions; and a slow payment call that needs resilience and background work. Nobody spends the afternoon on a to-do app.

Concept, then lab, then checkpoint. Each module is roughly twenty-five minutes of instructor-led demonstration followed by forty-five minutes of lab. Every lab ends at a git tag, checkpoint-1 through checkpoint-5, so anyone who falls behind can check out the checkpoint and continue with the group. Nobody is stuck at 2 PM because of a typo at 10 AM.

Production readiness is the through-line. Security, testing, observability, and deployment are woven into the build rather than saved for the last hour when energy is lowest. The final module is the reward: seeing the day's work light up in the Aspire dashboard.

Who this is for

Whether you are new to Minimal APIs or you have been building them since .NET 6 and want to sharpen your security and scalability skills, you will walk away with a comprehensive understanding of how to design, secure, test, and scale Web APIs on the latest .NET platform. Developers coming from ASP.NET Core MVC controllers are especially welcome; Module 1 spends time on exactly that transition.

What you will learn to do

• Design and implement RESTful endpoints with route groups, parameter binding, typed results, and endpoint filters
• Persist a domain with EF Core and SQLite, validate input with the .NET 10 built-in validation support, and return consistent ProblemDetails errors
• Secure endpoints with ASP.NET Core Identity, JWT bearer authentication, and policy- and resource-based authorization
• Apply API hardening: rate limiting, CORS, HTTPS and HSTS, secure headers, and the OWASP API Top 10
• Cache at the output and data layers, move slow work to a background service, make outbound calls resilient, and add health checks and OpenTelemetry
• Write integration tests that exercise the real pipeline, including authentication
• Orchestrate locally with .NET Aspire, build an OCI container image with no Dockerfile, and version the API before the first client arrives