Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/chrisross5/rwa-movies

College project (Development of web applications S4): A dockerized ASP.NET Core 6 app, deployed on GCP Cloud Run. Supports user & admin roles with CRUD for many entities, full API support & much more.
https://github.com/chrisross5/rwa-movies

aspnetcore automapper azure-app-service bootstrap cloud-run cookie-authentication csharp docker entity-framework-core hashing jquery jwt-authentication pagination razor-pages rest-api sendgrid shell smtp swagger web-sockets

Last synced: about 1 month ago
JSON representation

College project (Development of web applications S4): A dockerized ASP.NET Core 6 app, deployed on GCP Cloud Run. Supports user & admin roles with CRUD for many entities, full API support & much more.

Awesome Lists containing this project

README 

        
# App deployed on GCP, Cloud Run



### https://rwa.k1k1.dev



-- OR --



### https://rwa-movies-k2uko7wmrq-ew.a.run.app



**IMPORTANT: Startup could take up to a minute! See why [here](#cloud-run-solution).**



| USERNAME | PASSWORD | ROLE  |

| -------- | -------- | ----- |

| admin    | 2023     | ADMIN |

| john     | 1        | USER  |



## Docker & Cloud Run commands



Hub repo:  

https://hub.docker.com/r/kristijanross/rwa-movies/tags



Local testing with compose:  

`docker compose up --build`



Cloud Run deployment as a single container:  

`docker build -t kristijanross/rwa-movies . -f Dockerfile.combined`  

`docker run -p 1433:1433 -p 7116:7116 kristijanross/rwa-movies`  

`docker push kristijanross/rwa-movies`  

`gcloud run services update rwa-movies --image docker.io/kristijanross/rwa-movies@[digest]`



Cloud Run deployment with 2 containers (ingress + sidecar):  

`docker build -t kristijanross/rwa-movies-sqlserver . -f Dockerfile.sqlserver`  

`docker build -t kristijanross/rwa-movies-webapp . -f Dockerfile.webapp`  

`docker run --network bridge -p 1433:1433 kristijanross/rwa-movies-sqlserver`  

`docker run --network bridge -p 7116:7116 -e ConnectionStrings__RwaMoviesConnStr="Server=localhost;Database=RwaMovies;User Id=sa;Password=strongPassword!;TrustServerCertificate=True;" kristijanross/rwa-movies-webapp`  

`docker push kristijanross/rwa-movies-sqlserver`  

`docker push kristijanross/rwa-movies-webapp`



See [gcloud reference](https://cloud.google.com/sdk/gcloud/reference/run/services/update) for all update params.



MSSQL example with database initialization:  

https://github.com/microsoft/mssql-docker/tree/master/linux/preview/examples/mssql-customize



MSSQL useful commands in overview section:  

https://hub.docker.com/r/microsoft/mssql-server



Installing ASP.NET Core manually:  

https://learn.microsoft.com/en-us/dotnet/core/install/linux-ubuntu



## Cloud Run solution



### The question I asked and answered myself:



https://www.googlecloudcommunity.com/gc/Serverless/MSSQL-server-in-Cloud-Run-without-external-db/td-p/778818



### Excerpt:



~The SQL server wouldn't boot. I tried with and without a [volume (in memory)](https://cloud.google.com/run/docs/configuring/services/in-memory-volume-mounts), using first and second generation execution environments, limiting number of instances, always allocating cpu, these server locations: 172.17.0.1, 127.0.0.1, host.docker.internal, localhost, all without success.~



I created a Cloud Storage Bucket as a volume and mounted it to `/var/opt/mssql/data`.



Without volumes or with an In-Memory File-System volume, I think this error: _"error 87(the parameter is incorrect.) occurred while opening file '/var/opt/mssql/data/master.mdf' to obtain configuration information at startup."_ stopped the database from fully starting. I tried different mssql versions, and startup flags, but could not find a solution to this error, that is specific to Cloud Run.



While this could all work as a single container, I decided to put the SQL server in a sidecar (separate container) with a readiness probe to let my frontend (ingress container) know it's ready. Otherwise, the frontend would just output an error until the database was ready. On my Windows PC, the database is ready in ~10 seconds (setup and seed scripts included). On Cloud Run (6 CPU, 8GiB, max. 1 instance) it takes ~40 seconds. My startup probe:



```

tcp 1433 every 3s

Initial delay 10s

Timeout 3s

Failure threshold 20

```



When it's ready, the frontend starts quickly and database operations are surprisingly fast, even with pictures. I probably wouldn't notice a performance difference between this setup and Cloud SQL, ignoring the crazy startup duration. However, I'll be able to access it in 10 years with ~0$ total cost.



## Email



I'm using SendGrid, the world's largest cloud-based email delivery platform:  

https://app.sendgrid.com/settings/sender_auth



## Notes to lecturer



I went beyond all the requirements and added unique insights and expertise!



#### HR:



- Odvojio sam API kontrolere od View kontrolera koristeći [Area] atribute kako bih osigurao routing istoimenih kontrolera i akcija.

- Limitirao sam slike na .PNG i Admin role na jednog korisnika kako bih zadržao originalnu strukturu zadane baze podataka.

- Omogućio sam praćenje navigacije u pregledniku za Ajax straničenja i potpuno upravljanje žanrovima prema SPA principima.

- Onemogućio sam prijavu deaktiviranih (soft-deleted) korisnika i korisnika s nepotvrđenim emailom.

- Koristio sam SignalR paket koji utilizira Web Sockete za real-time komunikaciju sa statičkom stranicom notifikacija.

- Koristio sam MailKit paket za veću fleksibilnost i kontrolu SMTP postavki.

- Koristio sam Cookie autentifikaciju kao default, a za API sam forsirao JWT autentifikaciju. Samo dvije akcije dopuštaju ili Cookie ili JWT autentifikaciju, a to su akcije za dohvaćanje broja neposlanih notifikacija i slanje istih, koje koristi statička stranica za administratore.

- Aplikacija je potpuno responzivna i uređena.



#### EN:



- I separated API controllers from View controllers using [Area] attributes to ensure routing of controllers and actions with the same names.

- I restricted images to .PNG format and limited the Admin role to a single user to maintain the original structure of the provided database.

- I enabled navigation tracking in the browser for Ajax pagination and complete management of genres according to SPA principles.

- I disabled login for deactivated (soft-deleted) users and users with unconfirmed email addresses.

- I used the SignalR package, which utilizes WebSockets for real-time communication with the static notification page.

- I used the MailKit package for greater flexibility and control over SMTP settings.

- I used Cookie authentication as default, and for the API, I enforced JWT authentication. Only two actions allow either Cookie or JWT authentication, which are the actions for fetching the number of unsent notifications and sending them, used by the static admin page.

- The application is fully responsive and well-styled.



## ASP.NET BUG!



After presenting the app to my lecturer, I explained a bug I couldn't resolve: blocking access to the static site [RwaMovies/wwwroot/sites/Notifications.html](RwaMovies/wwwroot/sites/Notifications.html) for non-admin users. Although this isn't a critical security issue since all the API endpoints used by the static site are protected, I was determined to fix it. I went beyond the official documentation (https://learn.microsoft.com/en-us/aspnet/core/fundamentals/static-files?view=aspnetcore-6.0#static-file-authorization) but without success.



The core issue is that the CSS completely breaks and doesn't load once the static files are protected, even if only one file is protected. When I presented the bug, my lecturer was confident he could solve it and began coding with enthusiasm. We both worked on the issue, but after an hour, he had to leave. He assured me he would find a solution and get back to me. Unfortunately, I never received the solution, and the bug remains unresolved.



## Other notes



RWA ("Razvoj web aplikacija") - translates to Development of web applications (college course name).



The lecturer only provided [setup.sql](setup.sql), which had to stay unmodified.



Previously, the app was deployed on Azure (App Service, SQL Server, SQL Database) at https://rwa.k1k1.dev. Student credits covered big expenses!



---



For more info, see project specifications:



- [specs-en.pdf](RwaMovies/wwwroot/documents/specs-en.pdf)

- [specs-hr.pdf](RwaMovies/wwwroot/documents/specs-hr.pdf)