深入.NET 11：ASP.NET Core 10 高并发场景下的性能调优与安全加固

[ApiController]
[Route("[controller]")]
public class ProductsController : ControllerBase
{
    private readonly IProductService _productService;

    public ProductsController(IProductService productService)
    {
        _productService = productService;
    }

    [HttpGet]
    public async Task<IActionResult> GetProducts()
    {
        var products = await _productService.GetAllProductsAsync();
        return Ok(products);
    }
}

public interface IProductService
{
    Task<List<Product>> GetAllProductsAsync();
}

public class ProductService : IProductService
{
    public async Task<List<Product>> GetAllProductsAsync()
    {
        // 模拟异步数据库查询
        await Task.Delay(1000);
        return new List<Product>
        {
            new Product { Id = 1, Name = "Product 1" },
            new Product { Id = 2, Name = "Product 2" }
        };
    }
}

public class Product
{
    public int Id { get; set; }
    public string Name { get; set; }
}

public void ConfigureServices(IServiceCollection services)
{
    services.AddMemoryCache();
    services.AddControllers();
}

[ApiController]
[Route("[controller]")]
public class CachedDataController : ControllerBase
{
    private readonly IMemoryCache _memoryCache;

    public CachedDataController(IMemoryCache memoryCache)
    {
        _memoryCache = memoryCache;
    }

    [HttpGet]
    public IActionResult GetCachedData()
    {
        const string cacheKey = "CachedData";
        if (!_memoryCache.TryGetValue(cacheKey, out string cachedData))
        {
            cachedData = "Data from expensive operation";
            var cacheEntryOptions = new MemoryCacheEntryOptions()
              .SetSlidingExpiration(TimeSpan.FromMinutes(5));
            _memoryCache.Set(cacheKey, cachedData, cacheEntryOptions);
        }
        return Ok(cachedData);
    }
}

public void ConfigureServices(IServiceCollection services)
{
    services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
      .AddJwtBearer(options =>
       {
           options.TokenValidationParameters = new TokenValidationParameters
           {
               ValidateIssuer = true,
               ValidateAudience = true,
               ValidateLifetime = true,
               ValidateIssuerSigningKey = true,
               ValidIssuer = "yourIssuer",
               ValidAudience = "yourAudience",
               IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("yourSecretKey"))
           };
       });
    services.AddAuthorization(options =>
    {
        options.AddPolicy("AdminOnly", policy => policy.RequireRole("Admin"));
    });
    services.AddControllers();
}

[ApiController]
[Route("[controller]")]
[Authorize(Policy = "AdminOnly")]
public class AdminController : ControllerBase
{
    [HttpGet]
    public IActionResult GetAdminData()
    {
        return Ok("This is admin - only data");
    }
}

[ApiController]
[Route("[controller]")]
public class InputController : ControllerBase
{
    [HttpPost]
    public IActionResult ProcessInput([FromBody] string input)
    {
        // 自动验证和过滤输入，防止注入攻击
        if (string.IsNullOrEmpty(input))
        {
            return BadRequest("Input cannot be empty");
        }
        // 处理输入逻辑
        return Ok($"Processed input: {input}");
    }
}