Name: NDC London 2021
Start: 2021-01-25
End: 2021-01-29
Location: NDC London

This workshop will give you the basics for understanding GraphQL and then dive deep into advanced concepts like subscriptions. We will do this by building together a little slack clone and exploring how we can solve the problems of such a service by leveraging GraphQL.

You will learn how to build a GraphQL server in .NET as well as how we can consume GraphQL in Blazor WebAssembly applications.

After this workshop, you will know what GraphQL is. You will know how to build GraphQL servers in .NET and various concepts of building a GraphQL schema.


We will explore what GraphQL is and what it is not and how it compares to other service API technologies like REST and gRPC.


What is the query language and how can we apply it?

- Schema Definition Language / Type System


Overview over the GraphQL schema definition language and exploration of the GraphQL type system.


We will look at design principles for GraphQL schemas.


Let’s start applying our GraphQL knowledge! We will take GraphQL for a ride and build
with it step by step a small slack clone that uses a wide range of GraphQL features like subscriptions, filters, persisted queries, and many more things.


We will try out several GraphQL tools and see what we can do with them and our slack endpoint.

- Building a GUI Blazor for our GraphQL Server


We will pick up Blazor and build with it a simple real-time UI that uses our slack endpoint.

2 Days

Getting started with GraphQL on .NET

.NET

"Hack Yourself First" is all about building up defensive skills in developers. It looks at security from the attacker's perspective and takes them through the steps necessary to exploit vulnerable software on the web so that they can experience hacking first hand. Workshop participants are set specific goals they must complete that involve probing for risks and then exploiting discrete vulnerabilities in a specially built vulnerable application. The interactive nature of the workshop means that multiple attack vectors are usually identified across the spectrum of participants and each person contributes their own unique perspective as to how specific risks are exploited.

The objective of the workshop is that each person walks away with demonstrated experience across a broad spectrum of specific risks. They not only learn about but also demonstrate practical experience across a range of different vulnerabilities targeted to the specific needs of the group.

Courses run for two days on the following schedule:

The first day build fundamental security skills that all technology professionals delivering applications on the web should posses:

- Discovering Risks via the Browser
- Using an HTTP proxy
- XSS
- SQL Injection
- CSRF
- HTTPS
- Framework Disclosure

The second day delves deeper into online risks, covering more advanced topics in greater depth:

- Password Cracking
- Account Enumeration
- FiddlerScript
- Content Security Policy
- Session Hijacking
- Subresource integrity
- Brute Force Attacks
- Automating Attacks and Review

Attendees will get taught the mechanics of each of these risks and of course the defensive patterns required to defend against them. But more than that, they get exposed to how to think about security; how to apply it in depth via multiple defences, how to choose appropriate controls based on the specific risk of the feature and how to have the discussion about what makes sense in different circumstances.

Above all though, security is just one factor in delivering working software and it has to be applied appropriately. Sometimes it comes with a trade-off against usability or cost and decisions have to be made about not what's just most secure, but what's in the overall best interests of the product being built. This workshop helps those who attend have the right discussions about when and where to invest in security.

- Software Developers
- System Administrators
- Testers

This workshop is aimed at any software developer, system admin or tester who wants to get a better understanding what is going on in cyber space if it comes to hacking and cracking of systems. This workshop enables you to take a pro-active approach and you learn how hackers will try to break your system. This workshop will be an eye opener for most attendees and it is the starting point of becoming a better developer. It all starts with awareness and improving your own habits. So start hacking yourself first, to become a better developer!

Attendees will need to use their own computer with one of following software options installed: Fiddler: 

https://portswigger.net/burp/communitydownload

If possible please also bring your smartphone.

Hack Yourself First: How to go on the Cyber-Offence

Security


Monday: 09:00-17:00
Tuesday: 13:00-17:00
Wednesday: 13:00-17:00

This will be a hands-on workshop designed for beginners in functional programming. We'll do lots of domain modeling exercises starting with some simple models and then enhancing them with constraints, state machines, error handling, commands and events, and so on.

The core concepts of functional programming and how they can be applied to Domain Driven Design

How to represent the nouns and verbs of a domain (e.g. the ubiquitous language) using types.

Why representing the domain model using types is better than UML or other documentation (hint: it can never get out of sync)

How to capture constraints and business rules in the domain model itself instead of being buried in the implementation

How to treat errors as a part of the domain

How to build a complete business workflow from smaller components using composition

How to design a functional architecture with bounded contexts, validation, I/O and on.

At the end of the workshop you'll know how to accurately represent a rich domain using some simple code which can then be used as the starting point for an implementation.

Domain Modeling Made Functional

Functional Programming

ASP.NET Core 5, gRPC, Protobuf, Visual Studio, .NET CLI, Docker, Kubernetes, services meshes, monitoring, distributed tracing

Day 1: Building gRPC applications in ASP.NET Core

Day 2: Security, Deployment and Observability

Service mesh (using Linkerd as an example)

Attendees will be expected to be familiar with .NET and C#, and bring a computer with the latest .NET Core 5 SDK and an IDE (VS2019, VS Code or Rider). For day two a local Docker installation that supports Kubernetes is strongly recommended (e.g. Docker Desktop for Windows or Mac).

Modern distributed systems with gRPC in ASP.NET Core 5

This 2-day workshop will guide you through from beginning with creating containers all the way to running your containers on a Kubernetes cluster in the cloud.

We’ll cover the basics before moving onto more advanced topics, with a combination of slides and hands-on exercises the attendees will learn the fundamentals of containers and by the end of the workshop will have a good understanding of Kubernetes, how to run it and how to run their applications on Kubernetes.

Windows containers (*hands-on exercises will require a Windows laptop)

Windows 10 Pro with Hyper-v and Docker for Windows (with Kubernetes cluster setup)

Macs with Docker for Mac installed (with Kubernetes cluster setup)

Local development environment (Visual Studio 2016+ / Visual Studio Code)

https://docs.docker.com/docker-for-windows/

Docker and Kubernetes Workshop

Docker

Kubernetes

This hands-on workshop provides practical guidance and recommendations. We will cover architecture, technologies, tools and frameworks. We will examine strategies for organizing your projects, folders and files. We will design a system that is simple to build and maintain - now and well into the future.

You will leave this workshop having developed the foundation and structure for your next enterprise application, along with the knowledge to take your enterprise application development to the next level.

You will need a computer with the latest versions of the following tools installed:

 (installed workloads - ASP.NET and web development; .NET Core cross-platform development)

Feel free to use your preferred editor / IDE.

Practical Clean Architecture with .NET 5

Architecture

Multi-platform, multi-client, and highly-mobile users bring a new set of challenges, so the approaches of the past are no longer appropriate for modern applications. This two-day workshop is your chance to dive into all things security related to these new technologies. Learn how to securely connect native and browser-based applications to your back-ends and integrate them with enterprise identity management systems as well as social identity providers and services.


.NET Core, ASP.NET Core, MVC, Web APIs, Claims, OpenID Connect, OAuth 2.0, WS-Federation, SAML, JSON Web Tokens, Single Sign-on and off, Federation, Delegation, Home Realm, Discovery, CORS

Social Logins (e.g. Google, Facebook, Twitter, etc.)


Attendees will need to bring a computer with the latest .NET Core SDK and the IDE of your choice (e.g. Visual Studio) installed.

Identity & Access Control for modern Applications and APIs using ASP.NET Core 5

In this tutorial, we will look at why asynchronous messaging is often the preferred solution to the problems of integrating and distributed solution, and look at the implementation of common messaging patterns.

If you have ever been put off moving from RPC-based solutions to messaging because of the need to learn how to implement messaging based solutions, this workshop will get you started. if you have been using messaging but want to gain a firmer understanding

The session will be a hands-on introduction and take you from simple messaging scenarios like "Hello World" through to more complex ideas like routing, brokers, and publish-subscribe.

Day 1: Messaging Architectures and Simple Patterns

Day 2: Distributed Systems Advanced Patterns

There will be hands on coding exercises in .NET and Python enabling you to implement simple and more complex messaging scenarios.


We will use Rabbit MQ for examples. You need not have the latter installed on your machine, but you should have Docker installed on your machine, as exercises will use Docker Compose.This is a Bring Your Own Device (BYOD) course. At BYOD courses delegates are required to bring their own laptop with the necessary software installed

Practical Messaging Workshop

DevOps

Python

No matter what the JavaScript framework flavor of choice is, a good understanding of reactive programming and state management helps us write better code that is more closely tied to business logic, is easier to read, easier to debug, and easier to scale.

Talk (60 min)

Reactive Programming, State Management, and Redux for the Modern Front End Developer

JavaScript

When Hollywood uses digital technology to create digital characters that look uncannily like real actors, who gets the royalties? If a programmer creates an algorithm that uses Markov chains to generate song lyrics, who actually wrote the song? In a world where algorithms tell us what to watch, what to read and who to hire, can social networks still claim that they're just platforms - or should they be treated as publishers? Join Dylan Beattie - developer, musician, and creator of the Rockstar programming language - for a fascinating journey along the border between human innovation and digital automation, from mathematics to music and beyond.

Keynote: Computational Creativity

Observable Web Applications

Testing

When Open Source Came to Microsoft

Cross-Platform

Microsoft

Building a Game Boy emulator in .NET Core!

Gaming

HTTP Security Headers You Need To Have On Your Web Apps

Good Fences Make Good Neighbours

Microservices

Microsoft Q# and Azure Quantum

Cloud

Languages

Hot Chocolate: GraphQL Schema Stitching with ASP.Net Core

Blazor & gRPC - Code-first .NET SPA developer productivity



In this talk, you'll see what it's like to use the latest .NET 5 features to create a Blazor UI, and preview some exciting .NET 6 enhancements we have in the pipeline. You'll see a truly dramatic improvement in the developer experience, some runtime features that enable more robustness and performance than ever before, and helpful tips that can be applied in existing .NET 5-based applications. And of course, it’s demos all the way.

If you're new to Blazor, this will be a great way to get a sense of what it's all about. If you're already a seasoned expert, this is your chance to find out what's coming next.

Blazor in 2021

The Ultimate Guide To Building Better Azure ARM Templates

Continuous Delivery

Tools

Getting Started with Unity and AR/VR for the .NET Developer

Smart home from scratch - a little C#, a little C++  and a whole lot of cheap Chinese electronics

🤖Building a Telegram bot with Apache Kafka and ksqlDB

Database

Big Data

An Introduction To IoT (Internet of Toilets 🚽); Or How I Built an IoT Kitty Litter Box Using JS

Application Autoscaling Made Easy With Kubernetes Event-Driven Autoscaling (KEDA)

Serverless

OpenTelemetry 101

Design

Infrastructure *is* Code with the AWS Cloud Development Kit

Postponing architectural choices and start developing first with Dapr

Getting Started with GitHub Actions

Agile

In my talk I introduce Blazor, GraphQL and Umbraco Heartcore, the headless offering of Umbraco CMS.

I will explain the basic concepts and show you how you can create a Single Page Application using Blazor and integrate it with a CMS using the GraphQL API from Umbraco Heartcore.

Blazor, GraphQL and a headless CMS

.NET on Google Cloud Functions

The terms coupling and cohesion come from the world of structured programming, but they are also thrown about in the context of microservices. In this session, I look at the applicability of these terms to microservice architecture, and also do a deep dive into the different types of coupling to explore how ideas from the 1970s still have a lot of relevance to the types of systems we build today.

I cover a number of topics in the context of microservices, including:

What is the importance of information hiding, and how do you apply it

Different types of coupling, what kinds of problems they can cause, and how you can avoid them

How a surprising amount of good ideas came out of the 1960s and 1970s, but we just forgot them

Hiding The Lead

Form a team or play solo, and pit your wits against our fiendish questions that will test your knowledge of everything from software and tech to general knowledge - with some fantastic prizes for the lucky winners!
Link will be posted in the NDC London Slack Channel

Talk (90 min)

The NDC London Virtual Pub Quiz



What if I told you there was a way to migrate one page at a time, keeping everything else running normally? Well, there is. In this talk I’ll show you how to include Microsoft’s reverse proxy in an ASP.NET Core MVC application to proxy requests to your old ASP.NET app, but intercept specific pages and render them using shiny new Razor. With this approach, you can gradually migrate and upgrade your application at the same time as maintaining and supporting it. It may take years, but you’ll get there in the end!

Migrate your Web Apps to ASP.NET Core, one page at a time

This talk looks at the latest revision of OAuth called OAuth 2.1, and picks out a couple of useful additional specification that help you improve the security of your token-based systems. Expect information on key rotation, the JWT profile, resource indicators, JAR & PAR and proof of possession access tokens.

OAuth in 2021 – What’s up?

The Rise of Software Supply-Chain Attacks – How Secure is your .NET Application?

Dude, where is my class?!

.NET Core Dependency Injection – The Booster Jab

Mobius – writing your own .NET runtime running on .NET Core

Automating Android: Command line controls

Building a Mobile Flight Simulator

Embedded

Advanced Bluetooth® Technology - Under the APIs

Access All Areas: Making Accessibility More Accessible

Incidents are new normal

Soft Skills

Work Skills

REST - the ignored parts

A pragmatic approach to turn your data into actionable insights

Lessons Learned from the Trenches: Connectivity and Performance Tips&Tricks

Building a Robot Arm with .NET 5, Raspberry Pi, Blazor and Signal R

Evolutionary history of the RabbitMQ .NET Client towards concurrency

Concurrency

I know what you did last project (common mistakes we make in Azure)

How to secure your GitHub Actions

The leadership balancing act - achieving success without burning out.

People

Software and Database Refactor Patterns

The top 10 best new features in C# version 6 to 9

Securing Multitenant Databases with Entity Framework Core

Getting Started with Computer Vision

Machine Learning

Finding System Boundaries with Domain Storytelling

How To Make Your Website A Progressive Web App (And Why You Might Want To)

Gaining Confidence with Cypress Tests

Intro to Blazing Web Accessibility (*)

How to develop to be compliant with OAuth 2.1 out of the gate

Power your .NET application with the new generation of diagnostics

Authentication and Authorization in Blazor

Running PHP apps on .NET 5

Little Fluffy Clouds

In this session, I'll show you how to write DRY tests by leveraging an open source library called AutoFixture. AutoFixture lets you set up your test scenarios by runtime-generating data that meets your requirements. By not repeating the same boilerplate setup code everywhere, your tests will have minimal coupling to your production code. They will be your safety net while also giving you the freedom to refactor your production code as you see fit.

Don't think that's possible? Join me in this session and see for yourself

DRY TDD with AutoFixture

CI/CD and beyond with GitHub Actions

Designing composable functional libraries, not just for data visualization

The NDC London Livestream Party

In this session, you'll learn where the SQL Server database fits in to DevOps, and how you can use tools to extend your infrastructure to make the database a first-class citizen, just like your source code. You'll see how to track changes with version control; create update packages; and deploy to multiple environments with complete automation like development, test, UAT, and production.

DevOps for Your Relational Database Foundations

Tuning web performance with just browser APIs

ReST API Design: A beginner's guide

Unleash the Power of VS Code

TDD Revisited

Web Components are browser compliant components that can be used in any app that works with HTML.

These components allow us to modularise not just our UI components but also to create highly functional components. These can then be used to convert monolithic apps into a set of independent but connected Micro Apps or Micro Services. We will look at components that have elazy loading, dynamic import and use of IndexedDB for near instant and offline data rendering.

In this talk, we will look at two demos. One will be braking a highly monolithic PHP app into a set of Micro Apps, deployable in an HTML page as well as being able to be deployed into other apps. The other will be a demo of a range of different apps deployed as Web Components, interacting together as part of an enterprise application. A range of Micro App architectures are possible and this one use Event Sourcing and Synchronicity.

Finally, we look at how Web Components can be created by frameworks and deployed in frameworks.

There will be a Github repo containing the first demo project and lessons on Web Components for attendees to follow along with, as well as a YouTube video series for attendees to dive deeper after the talk.

NDC { London }

Agenda 2021

09:00 - 10:00 (UTC±00)

Keynote: Computational Creativity

Dylan Beattie

09:00 - 17:00 (UTC±00)

Domain Modeling Made Functional

Scott Wlaschin

10:20 - 11:20 (UTC±00)

When Open Source Came to Microsoft

Richard Campbell

Blazor & gRPC - Code-first .NET SPA developer productivity

Christian Weyer

🤖Building a Telegram bot with Apache Kafka and ksqlDB

Robin Moffatt

Application Autoscaling Made Easy With Kubernetes Event-Driven Autoscaling (KEDA)

Tom Kerkhove

Microsoft Q# and Azure Quantum

Johnny Hooyberghs

Hiding The Lead

Sam Newman

11:40 - 12:40 (UTC±00)

Building a Game Boy emulator in .NET Core!

David Whitney

Blazor, GraphQL and a headless CMS

Poornima Nayar

Smart home from scratch - a little C#, a little C++ and a whole lot of cheap Chinese electronics

Nir Dobovizki

Postponing architectural choices and start developing first with Dapr

Michaël Hompus

Getting Started with GitHub Actions

Mickey Gousset

13:40 - 14:40 (UTC±00)

Blazor in 2021

Steve Sanderson

Observable Web Applications

Todd Gardner

An Introduction To IoT (Internet of Toilets 🚽); Or How I Built an IoT Kitty Litter Box Using JS

Joe Karlsson

Hot Chocolate: GraphQL Schema Stitching with ASP.Net Core

Michael Staib

OAuth in 2021 – What’s up?

Dominick Baier

15:00 - 16:00 (UTC±00)

.NET on Google Cloud Functions

Jon Skeet

HTTP Security Headers You Need To Have On Your Web Apps

Scott Sauber

Getting Started with Unity and AR/VR for the .NET Developer

Davide Zordan

OpenTelemetry 101

Rob Ashton

Infrastructure *is* Code with the AWS Cloud Development Kit

Steve Roberts

16:20 - 17:20 (UTC±00)

Reactive Programming, State Management, and Redux for the Modern Front End Developer

Jennifer Wadella

The Ultimate Guide To Building Better Azure ARM Templates

Eldert Grootenboer

Migrate your Web Apps to ASP.NET Core, one page at a time

Mark Rendle

Good Fences Make Good Neighbours

Trond Hjorteland

20:00 - 21:30 (UTC±00)

The NDC London Virtual Pub Quiz

Mark Rendle

Dylan Beattie

Infrastructure is Code with the AWS Cloud Development Kit