How # (sharp) is Your Katana (Ciprian Jichici)

Premium community conference on Microsoft technologies itcampro@ itcamp14#

How # (sharp) is your Katana?

Ciprian JichiciGeneral Manager, GenisoftChief Architect, High-Tech Systems & SoftwareMicrosoft Regional Director, RomaniaMVP, Microsoft Azure

Roxana GoidaciChief Architect, Genisoft


Huge thanks to our sponsors & partners!


We’re proud to be Platinum sponsors!


A new world for web stacks

A real-world business scenario

#ening your Katana

Security, security, security

Agenda


A NEW WORLD FOR WEB STACKS


The Internet of Things is Here!


OWINOpen Web Interface for .NET


OWINFunc<IDictionary<string, object>, Task>

Func<IDictionary<string, object>, Task>;


The Role of OWIN


KATANA


Traditional Japanese sword

Microsoft’s implementation of OWIN

KATANA


A REAL-WORLD BUSINESS SCENARIO


The Sensiblu Mobile App

Datacenter

https://mobile.htss.ro/sensiblu


Service Availability is Critical

Datacenter

https://mobile.htss.ro/sensiblu

Microsoft Azure

REST endpoint tester


The Architecture


DEMO

A “Simple” REST tester


#ENING YOUR KATANA


Portable – substitute components

Modular/Flexible – small, focused components, giving great control over use

Lightweight/Performant/Scalable – break the monolith, consume fewer resources, scale better

The KATANA Project – High Level Goals


Common wisdom says it has a direct dependency on the complexity of the solution

Intermezzo – About Software Scalability


So…..

A piece of software that does absolutely nothing will scale infinitely

- Scot Hanselman

Intermezzo – About Software Scalability


IAppBuilder is the core concept

Enables the chaining of middleware components

The KATANA Project


The KATANA Project


Use an Azure Worker Role

Use Web API for the management endpoint

Use a lightweight web stack based on OWIN / KATANA

Use Windows Azure Active Directory for authentication

Our Technical Approach


DEMO

Bootstrapping KATANA in an Azure Worker Role


SECURITY, SECURITY, SECURITY


Our problem:

The management endpoint cannot be called by anyone

Secure, but how?


KATANA makes it all “simple”:

1. Register your service with WAAD

2. Call UseWindowsAzureActiveDirectoryBearerAuthentication

when bootstrapping

Believe it or not, that’s all you need to do

Windows Azure Active Directory @ work


But…

There a LOT going on behind the scenes…

Windows Azure Active Directory @ work


We use the Bearer token approach

- No need to prove possession of a cryptographic key

- Protect in storage and transport (that’s why we need HTTPS)

The Rich Client Story


DEMO

Implementing a secure Web API endpoint with KATANA and WAAD


We needed a small, flexible, and secure web stack in an Azure worker role

We used OWIN / KATANA integrated with Windows Azure Active Directory

Our solution demonstrates how the new modular web stack of the future works in a real, cloud-based scenario

In an nutshell…


Q & A

How # (sharp) is Your Katana (Ciprian Jichici)

Technology

Transcript of How # (sharp) is Your Katana (Ciprian Jichici)