Category: ASP.NET

Harden login: lockout, MFA, secure cookies, and password hashing.

Test services and pure logic in isolation.

Write tests with [Fact]/[Theory] in xUnit.

Use NUnit attributes and asserts when preferred by the team.

Test the pipeline with WebApplicationFactory.

Host on IIS with ASP.NET Core Module or Framework pools.

Run Kestrel behind Nginx/Apache as a reverse proxy.

Monitor with Application Insights/OpenTelemetry metrics and traces.

Structure logs with scopes and correlation IDs.

Integrate PayPal Orders/Checkout APIs from the server.