Configuration

Overview

ESP Santa Fe de Antioquia uses a combination of appsettings.json configuration and Startup.cs service registration to configure the application. This guide covers all essential configuration areas.

Database Configuration

Connection String

The database connection is configured in appsettings.json:

appsettings.json

{
  "ConnectionStrings": {
    "DefaultConnection": "Server=JHOTAMS;Database=BDESPSantaFeAnt;Trusted_Connection=True;MultipleActiveResultSets=true"
  }
}

MultipleActiveResultSets=true is required for Entity Framework Core to handle multiple queries simultaneously.

Connection String Formats

Server=localhost;Database=BDESPSantaFeAnt;Trusted_Connection=True;MultipleActiveResultSets=true

DbContext Registration

The ApplicationDbContext is registered in Startup.cs:prjESPSantaFeAnt:28-30:

Startup.cs

services.AddDbContext<ApplicationDbContext>(options =>
    options.UseSqlServer(
        Configuration.GetConnectionString("DefaultConnection")));

The context manages the following entities:

Categories, Products, Employees
Documents, FileDocuments
PQRSD (complaints and suggestions)
BiddingParticipants, Masters
ASP.NET Identity tables

Authentication & Identity

Identity Configuration

ASP.NET Core Identity is configured in Startup.cs:prjESPSantaFeAnt:32-35:

Startup.cs

services.AddIdentity<IdentityUser, IdentityRole>(
    options => options.SignIn.RequireConfirmedAccount = true)
   .AddEntityFrameworkStores<ApplicationDbContext>()
   .AddDefaultTokenProviders();

RequireConfirmedAccount = true requires users to confirm their email before signing in. Ensure SendGrid is configured for email confirmation to work.

Password Policy

Password requirements are defined in Startup.cs:prjESPSantaFeAnt:42-50:

Startup.cs

services.Configure<IdentityOptions>(options =>
{
    // Password settings
    options.Password.RequireDigit = false;
    options.Password.RequireLowercase = false;
    options.Password.RequireNonAlphanumeric = false;
    options.Password.RequireUppercase = true;
    options.Password.RequiredLength = 4;
    options.Password.RequiredUniqueChars = 0;
});

Setting	Value	Description
`RequireDigit`	`false`	Numbers are optional
`RequireLowercase`	`false`	Lowercase letters are optional
`RequireNonAlphanumeric`	`false`	Special characters are optional
`RequireUppercase`	`true`	At least one uppercase letter required
`RequiredLength`	`4`	Minimum 4 characters
`RequiredUniqueChars`	`0`	No unique character requirement

For production environments, consider strengthening these password requirements to improve security.

Account Lockout

Lockout policy is configured in Startup.cs:prjESPSantaFeAnt:52-55:

Startup.cs

// Lockout settings
options.Lockout.DefaultLockoutTimeSpan = TimeSpan.FromMinutes(5);
options.Lockout.MaxFailedAccessAttempts = 5;
options.Lockout.AllowedForNewUsers = true;

Accounts are locked for 5 minutes after 5 failed login attempts.

User Settings

Allowed username characters are defined in Startup.cs:prjESPSantaFeAnt:57-60:

Startup.cs

// User settings
options.User.AllowedUserNameCharacters =
    "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._@+";
options.User.RequireUniqueEmail = false;

Authentication cookies are configured in Startup.cs:prjESPSantaFeAnt:63-72:

Startup.cs

services.ConfigureApplicationCookie(options =>
{
    options.Cookie.HttpOnly = true;
    options.ExpireTimeSpan = TimeSpan.FromMinutes(180);
    options.LoginPath = "/Identity/Account/Login";
    options.AccessDeniedPath = "/Identity/Account/AccessDenied";
    options.SlidingExpiration = true;
});

Session Duration: 180 minutes (3 hours)
HttpOnly: Cookies are not accessible via JavaScript
SlidingExpiration: Session extends on activity

Token Lifetime

Email confirmation and password reset tokens expire after 7 days (Startup.cs:prjESPSantaFeAnt:38-39):

Startup.cs

services.Configure<DataProtectionTokenProviderOptions>(o =>
    o.TokenLifespan = TimeSpan.FromDays(7));

Email Configuration (SendGrid)

SendGrid API Key

Configure your SendGrid API key in appsettings.json:

appsettings.json

{
  "ConnectionStrings": {
    "SendGrid_api_key": "SG.your-api-key-here"
  }
}

Never commit your SendGrid API key to source control! Use environment variables or Azure Key Vault for production.

Email Service Implementation

The email service is registered in Startup.cs:prjESPSantaFeAnt:88:

Startup.cs

services.AddTransient<IEmailSendGrid, EmailSendGrid>();

Implementation from EmailSendGrid.cs:services/Commons:15-45:

EmailSendGrid.cs

public class EmailSendGrid : IEmailSendGrid
{
    private readonly string _configuration;

    public EmailSendGrid(IConfiguration configuration)
    {
        _configuration = configuration.GetConnectionString("SendGrid_api_key");
    }

    public Task Execute(string subject, string message, string email)
    {
        var client = new SendGridClient(_configuration);
        var msg = new SendGridMessage()
        {
            From = new EmailAddress("[email protected]", subject),
            Subject = subject,
            PlainTextContent = message,
            HtmlContent = message,
        };
        msg.AddTo(new EmailAddress(email));
        msg.SetClickTracking(false, false);
        
        return client.SendEmailAsync(msg);
    }
}

Get a SendGrid API Key

Create SendGrid Account

Create API Key

Navigate to Settings > API Keys
Click Create API Key
Choose Full Access or Restricted Access
Copy the generated API key

Configure Application

Add the API key to your appsettings.json:

"SendGrid_api_key": "SG.YOUR_ACTUAL_API_KEY"

Email Settings

From Address: [email protected]
Click Tracking: Disabled for security
Supports: Plain text and HTML content

File Upload Configuration

File Upload Service

The file upload service is registered in Startup.cs:prjESPSantaFeAnt:86:

Startup.cs

services.AddTransient<IUploadedFileIIS, UploadedFileIIS>();

Upload Implementation

Files are stored in the wwwroot/images directory, organized by account/category (UploadedFileIIS.cs:services/Commons:30-43):

UploadedFileIIS.cs

public string UploadedFileImage(IFormFile file, string account)
{
    string uploadsFolder = Path.Combine(_hostingEnvironment.WebRootPath, "images\\" + account);
    string uniqueFileName = "images-" + Guid.NewGuid().ToString() + "." + Path.GetExtension(file.FileName).Substring(1);
    string filePath = Path.Combine(uploadsFolder, uniqueFileName);
    
    using (var fileStream = new FileStream(filePath, FileMode.Create))
    {
        file.CopyTo(fileStream);
    }
    
    return uniqueFileName;
}

Storage Structure

wwwroot/
└── images/
    ├── employees/       # Employee photos
    ├── products/        # Product images
    ├── documents/       # Document files
    ├── blog/           # Blog post images
    └── brigades/       # Brigade photos

File Upload Features

Unique Names: Files are renamed with GUIDs to prevent conflicts
Multiple Uploads: Supports batch file uploads
Cover Images: Special handling for cover/featured images
File Deletion: Automatic cleanup when entities are deleted

Ensure the application has write permissions to the wwwroot/images directory. Create subdirectories manually if deploying to IIS.

Service Registration

All application services are registered in Startup.cs:prjESPSantaFeAnt:76-88:

Startup.cs

services.AddTransient<ICategoryService, CategoryService>();
services.AddTransient<INacionLicitanteService, NacionLicitanteService>();
services.AddTransient<IBiddingParticipantService, BiddingParticipantService>();
services.AddTransient<IDocumentService, DocumentService>();
services.AddTransient<IBlogService, BlogService>();
services.AddTransient<IPQRSDService, PQRSDService>();
services.AddTransient<IBrigadeService, BrigadeService>();
services.AddTransient<IProductService, ProductService>();
services.AddTransient<IEmployeeService, EmployeeService>();

services.AddTransient<IUploadedFileIIS, UploadedFileIIS>();
services.AddTransient<IFormatStringUrl, FormatStringUrl>();
services.AddTransient<IEmailSendGrid, EmailSendGrid>();

All services use Transient lifetime, meaning a new instance is created for each request.

AutoMapper Configuration

AutoMapper is registered in Startup.cs:prjESPSantaFeAnt:74:

Startup.cs

services.AddAutoMapper(typeof(Startup));

AutoMapper automatically discovers mapping profiles in the assembly for DTO conversions.

Logging Configuration

Logging levels are configured in appsettings.json:

appsettings.json

{
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Information"
    }
  }
}

Category	Level	Description
`Default`	`Information`	General application logs
`Microsoft`	`Warning`	Framework logs (reduced verbosity)
`Microsoft.Hosting.Lifetime`	`Information`	Startup/shutdown events

Environment-Specific Settings

Development

In development, additional debugging is enabled (Startup.cs:prjESPSantaFeAnt:103-107):

Startup.cs

if (env.IsProduction())
{
    app.UseDeveloperExceptionPage();
    app.UseDatabaseErrorPage();
}

The code appears to have inverted logic - it shows developer pages in production. This should be reviewed for production deployments.

Production

For production deployments:

Use environment variables for sensitive configuration
Enable HTTPS redirection (enabled by default)
Configure HSTS headers
Use Azure Key Vault or similar for secrets

URL Configuration

Custom URLs can be configured in Program.cs:prjESPSantaFeAnt:24:

Program.cs

// Uncomment to use custom URLs
webBuilder.UseUrls("http://localhost:5024", "http://192.164.1.106:5024");

Next Steps

Architecture Overview

Understand the application structure

Database Schema

Explore the data model

Authentication

Learn about the security architecture

Services Layer

Dive into business logic

Get Started

Core Features

Architecture

Overview

Database Configuration

Connection String

Connection String Formats

DbContext Registration

Authentication & Identity

Identity Configuration

Password Policy

Account Lockout

User Settings

Token Lifetime

Email Configuration (SendGrid)

SendGrid API Key

Email Service Implementation

Get a SendGrid API Key

Email Settings

File Upload Configuration

File Upload Service

Upload Implementation

Storage Structure

File Upload Features

Service Registration

AutoMapper Configuration

Logging Configuration

Environment-Specific Settings

Development

Production

URL Configuration

Next Steps

Architecture Overview

Database Schema

Authentication

Services Layer

Build docs developers (and LLMs) love

Get Started

Core Features

Architecture

​Overview

​Database Configuration

​Connection String

​Connection String Formats

​DbContext Registration

​Authentication & Identity

​Identity Configuration

​Password Policy

​Account Lockout

​User Settings

​Cookie Configuration

​Token Lifetime

​Email Configuration (SendGrid)

​SendGrid API Key

​Email Service Implementation

​Get a SendGrid API Key

​Email Settings

​File Upload Configuration

​File Upload Service

​Upload Implementation

​Storage Structure

​File Upload Features

​Service Registration

​AutoMapper Configuration

​Logging Configuration

​Environment-Specific Settings

​Development

​Production

​URL Configuration

​Next Steps

Architecture Overview

Database Schema

Authentication

Services Layer

Build docs developers (and LLMs) love

Overview

Database Configuration

Connection String

Connection String Formats

DbContext Registration

Authentication & Identity

Identity Configuration

Password Policy

Account Lockout

User Settings

Cookie Configuration

Token Lifetime

Email Configuration (SendGrid)

SendGrid API Key

Email Service Implementation

Get a SendGrid API Key

Email Settings

File Upload Configuration

File Upload Service

Upload Implementation

Storage Structure

File Upload Features

Service Registration

AutoMapper Configuration

Logging Configuration

Environment-Specific Settings

Development

Production

URL Configuration

Next Steps