CDCoding Dropletsincodingdroplets.com·21h ago · 10 min readToken-Based Rate Limiting for AI Endpoints in ASP.NET Core: A Real-World WalkthroughThe first AI endpoint I put behind a rate limiter was protected by a policy that allowed 60 requests per minute per user. It felt responsible. Two weeks later one customer generated a bill larger than00
CDCoding Dropletsincodingdroplets.com·1d ago · 9 min readCustomizing 401 Responses with JwtBearerEvents in ASP.NET CoreEvery error your ASP.NET Core API returns is a documented, structured Problem Details payload. Except one. When a bearer token is missing, expired, or malformed, the client gets a 401 with an empty bo00
CDCoding Dropletsincodingdroplets.com·2d ago · 8 min readMigrating from the OpenAI SDK to Microsoft.Extensions.AI in .NET: A Step-by-Step GuideMost .NET teams started their AI work the same way: install the official OpenAI package, call it directly from a service, ship it. That is exactly the right first move. The problem shows up six months10
CDCoding Dropletsincodingdroplets.com·3d ago · 9 min readSending SignalR Messages to a Specific User in ASP.NET Core with IUserIdProviderThe requirement sounds trivial until you try it. A background job finishes and exactly one person needs to know, on whichever devices they happen to have open. The first instinct is to store connectio00
CDCoding Dropletsincodingdroplets.com·4d ago · 10 min readRedacting PII Before It Reaches the LLM in ASP.NET Core AI APIsThe prompt is the leak. Every other control in an AI feature gets scrutinised - authentication on the endpoint, authorization on the tools, validation of the model's output - while the one thing that 00