Document Management in .NET: Renditions & Secure Links
Storing an uploaded file is the easy 20%. The other 80% — thumbnails, typed metadata, and secure expiring share links — is what every team reinvents badly. Here is how Granit solves all three.
deep-dive
24 posts with the tag “deep-dive”
Structured LLM Output in .NET: Stop Parsing Prose
Regex-parsing an LLM's prose reply breaks the day the model rephrases. Ask for a typed object instead — your C# type becomes a JSON schema the model must satisfy.
RAG in .NET: Semantic Search Without a Vector Vendor
You don't need a vector database vendor to ship retrieval-augmented generation in .NET. Here's semantic search end to end — embeddings, pgvector, similarity search, and a grounded LLM answer — on the Postgres you already run.
A Power BI Feed From Your .NET App With OData
Finance wants the numbers in Power BI, refreshed daily — again. Instead of hand-building another CSV export, expose a governed OData v4 feed from your .NET app and let Power BI pull live data through the same security pipeline as your grids.
VAT and Sales Tax for .NET SaaS, Done Right
Tax is where naive SaaS billing quietly breaks. Here is how to get EU cross-border VAT, US sales tax, and historical invoice integrity right in a .NET SaaS — with real Granit code.
Subscription Billing in .NET: Proration and Dunning
Recurring billing looks like a cron job that charges a card once a month. Then a customer upgrades on day 20, a card declines, and someone overpays. Here is how the hard parts actually work in .NET.
SEPA Payments in .NET Without a Payment Gateway
Recurring EU billing does not require a US payment gateway. Here is how a provider-agnostic design collects a finalized invoice over SEPA — no Stripe, no Mollie, no Cloud Act exposure — and stays retry-safe end to end.
Usage-Based Billing in .NET Without a Metering Vendor
You do not need a metering vendor to bill on usage. Here is the full in-process pipeline — event ingest, idempotent dedupe, watermark rollup, quota alerts, invoice — built on Granit.Metering and Granit.Invoicing.
Multi-Tenant Data Isolation in .NET: Three Strategies
Row-level, schema-per-tenant, or database-per-tenant? Here is how the three isolation strategies trade off — and how Granit gives you the safe default plus a mechanical path to strict isolation when a customer demands it.
Impossible Travel Detection & Session Risk Scoring in .NET
A stolen session cookie passes every auth check you have. The signal that something is wrong isn't in the token — it's in the pattern: a login from Brussels, then São Paulo, eight minutes later. Here's how to catch it in .NET.
FAPI 2.0 in .NET: Financial-Grade Security with One Flag
FAPI 2.0 is the security profile required by Open Banking, healthcare APIs, and government identity systems. Most teams think conformance takes months. Granit's OpenIddict server, BFF, and resource server implement every requirement — one flag enables the full profile.
Rate Limiting and Bulkhead Isolation in ASP.NET Core
Rate limiting and bulkhead isolation are often mentioned together but solve different problems. This deep-dive explains both patterns, shows where they fail without the other, and walks through Granit's dual enforcement model — Redis-backed quotas for the time axis, concurrency limiters for the thread axis.
Never Lose a Webhook: Signed, Durable Delivery in .NET
A server restart between your database commit and your HTTP POST drops the event forever. The fix is the transactional outbox pattern — persist the event in the same transaction as your data, relay it asynchronously, retry on failure. Here is how Granit.Webhooks implements it end-to-end.
Multi-Regulation Cookie Consent: GDPR, CCPA, LGPD
Shipping to the EU means opt-in. Shipping to California means opt-out. Shipping to Brazil means opt-in again. Most teams hardcode GDPR and call it done. Here is how Granit resolves the right consent model automatically — per tenant, per request, without a line of conditional logic in your application code.
Content Security Policy in ASP.NET Core, Per Endpoint
Your strict Content Security Policy breaks the moment one ASP.NET Core route serves HTML — Scalar, an admin page, a Keycloak iframe. The usual band-aid weakens every other endpoint. Granit's per-endpoint CSP composition keeps strict defaults strict and lets the package that mounts the UI declare its own relaxation.
Soft Deletes and Audit Trails with EF Core Interceptors
Stop sprinkling CreatedAt assignments across repositories and IsDeleted = false across queries. Five interceptors and one global filter make compliance the default — and ExecuteUpdate the only thing left to watch for.
HybridCache + Redis: Solving Distributed Cache Invalidation
Two-tier caches are fast, but cross-pod invalidation is the part everyone gets wrong. Here is how the L1 + L2 + backplane pattern works, and how Granit wires it up with Redis.
CQRS Without MediatR: How Granit Uses Wolverine
MediatR is in-process only — no outbox, no retry, no transport. Wolverine is the CQRS bus most teams actually need. Here is how Granit uses it.
Server-Sent Events in .NET 10: Real-Time Without WebSockets
.NET 10 makes SSE a first-class citizen with TypedResults.ServerSentEvents(). Build a complete real-time notification stream from HTTP primitives to React hooks — no WebSocket plumbing required.
RFC 7807 Problem Details: The Only Way to Return Errors
Stop returning bare strings from your .NET APIs. RFC 7807 Problem Details is the standard for error responses — here is why it matters, what the spec actually says, and how Granit enforces it with zero boilerplate.
SSE vs SignalR vs WebSockets
SSE, SignalR, or raw WebSockets? A practical decision framework for .NET real-time applications, with protocol deep-dives, trade-offs, and ready-to-use Granit code samples for each transport.
Building SOC 2 Type 2-Ready SaaS with Granit
Enterprise customers ask for a SOC 2 Type 2 report before signing. Here is how Granit's modules map to the five Trust Service Criteria — and what the framework cannot replace.
How Granit Helps You Ship NIS 2-Ready .NET Applications
NIS 2 is now law across the EU. Here is what it requires from your .NET stack — and how Granit's supply chain pipeline and embedded security modules cover the key obligations out of the box.
Crypto-Shredding: GDPR Erasure Without Deleting a Single Row
Physical deletion breaks audit trails, conflicts with legal holds, and fails on append-only systems. Crypto-shredding solves all three: destroy the key, and the ciphertext becomes random noise. Here is how Granit implements it.