A production-oriented ASP.NET Core 8 Web API template built with Clean Architecture. Use it as a starting point for new backend projects or as a portfolio showcase for layered design, JWT authentication, RBAC, EF Core, and Docker.

• Clean Architecture — API, Presentation, Application, Infrastructure, and Domain layers
• Minimal APIs — endpoint classes implementing IEndpoint (not MVC controllers)
• JWT authentication — sign-in, access tokens, refresh token rotation, logout
• Role + permission authorization — role claims and permission policies on protected endpoints
• Platform RBAC section — /api/Platform/* for roles, permissions, and assignments
• EF Core 8 + SQL Server — migrations, repositories, Unit of Work, seed data
• FluentValidation — request validation on POST/PUT endpoints and paginated GET
• Consistent API responses — unified ApiResponse<T> envelope
• Global exception handling — same response shape; no stack traces in production
• Health check — GET /health with SQL Server connectivity (non-test environments)
• Docker Compose — API + SQL Server with persistent volume and .env secrets
• Swagger / OpenAPI — enabled in Development and Docker (not in Production)
• Tests — unit tests (Application) + integration tests (WebApplicationFactory)
• Demo admin UI — static page at /admin for sign-in and user listing

flowchart TB
    Client["Client / Swagger / Admin UI"]

    subgraph API["WebAppTemplate.API"]
        Program["Program.cs · DI · Pipeline"]
    end

    subgraph Presentation["WebAppTemplate.Presentation"]
        Endpoints["Minimal API Endpoints · IEndpoint"]
        Validators["FluentValidation"]
        Middleware["GlobalExceptionMiddleware"]
    end

    subgraph Application["WebAppTemplate.Application"]
        Services["Services · ServiceResult"]
        DTOs["DTOs · AutoMapper"]
    end

    subgraph Infrastructure["WebAppTemplate.Infrastructure"]
        EF["EF Core · DbContext"]
        Repos["Repositories · UnitOfWork"]
        Auth["JWT · BCrypt"]
    end

    subgraph Domain["WebAppTemplate.Domain"]
        Entities["Entities · Interfaces"]
    end

    DB[("SQL Server")]

    Client --> Program
    Program --> Endpoints
    Endpoints --> Validators
    Endpoints --> Services
    Services --> Repos
    Repos --> EF
    EF --> DB

Request flow

HTTP Request → IEndpoint → FluentValidation → Service → UnitOfWork → Repository → Database
                                    ↓
                         ServiceResult<T> → ApiResponse<T> → JSON Response

• .NET 8 SDK
• Docker Desktop (optional)
• SQL Server (via Docker or local instance)

git clone https://github.com/bilalkhan190/WebAppTemplate.git
cd WebAppTemplate

cp WebAppTemplate.API/appsettings.example.json WebAppTemplate.API/appsettings.json
cp WebAppTemplate.API/appsettings.example.Development.json WebAppTemplate.API/appsettings.Development.json

appsettings.json is git-ignored. Never commit real secrets.

cp .env.example .env
# Edit .env and set MSSQL_SA_PASSWORD
docker compose up -d sqlserver

dotnet ef database update --project WebAppTemplate.Infrastructure --startup-project WebAppTemplate.API

Local development

dotnet run --project WebAppTemplate.API

• Swagger: http://localhost:5083/swagger
• Admin UI: http://localhost:5083/admin

Docker (API + SQL Server)

docker compose up --build -d

• Swagger: http://localhost:5000/swagger

Development only. Change credentials before production.

Authorization policies: Administrator role bypasses permission checks. Other users need permission claims (e.g. users.read, users.manage) embedded in the JWT from role-permission assignments.

1. Call POST /api/Account/sign-in
2. Copy accessToken from the response data object
3. Click Authorize in Swagger
4. Enter: Bearer <your-token>

Success

{
  "success": true,
  "message": "Operation Successful",
  "data": { }
}

Validation / business error

{
  "success": false,
  "message": "Email is required., Password is required.",
  "data": null
}

dotnet test

WebAppTemplate/
├── WebAppTemplate.API/              # Host, Program.cs, Swagger, Docker, wwwroot/admin
├── WebAppTemplate.Presentation/     # Minimal API endpoints, validators, middleware
├── WebAppTemplate.Application/      # Services, DTOs, ServiceResult, AutoMapper
├── WebAppTemplate.Infrastructure/     # EF Core, repositories, JWT, seeding
├── WebAppTemplate.Domain/             # Entities, enums, repository interfaces
├── WebAppTemplate.Application.Tests/
├── WebAppTemplate.IntegrationTests/
├── .github/workflows/ci.yml
├── docs/TASKS.md
└── docker-compose.yml

docker compose up --build -d
docker compose down
docker compose logs -f api

Copy .env.example to .env before starting Docker. Never commit .env.

Repo code-wise showcase-ready hai. GitHub par ye settings configure karo taake profile/recruiters ke liye professional lage.

git push origin main

Local main par latest commit ho to pehle push karo — CI badge tabhi green dikhega.

GitHub → repo → Settings → General → Danger Zone → Change visibility → Public

Repo page par ⚙️ About (right side) → Edit:

Settings → General → Template repository → ✅ Enable

Is se doosre log Use this template se naya repo bana sakte hain — template projects ke liye standard practice hai.

Settings → General → Default branch → main

Settings → Actions → General → Workflow permissions:

• ✅ Read and write permissions (default theek hai)
• Actions enabled hon

Push ke baad Actions tab check karo — CI green hona chahiye.

Settings → scroll to Social preview → image upload karo (1280×640):

• Swagger screenshot, ya architecture diagram
• Recruiters ko link share karte waqt professional card dikhega

Apne GitHub profile → Customize your pins → WebAppTemplate pin karo.

Agar bilalkhan190/bilalkhan190 profile README hai to usme is repo ka link + 1 line description add karo.

See docs/TASKS.md for the full checklist. Optional next steps:

• API versioning
• Rate limiting on auth endpoints
• Serilog structured logging
• Email verification / password reset

See CONTRIBUTING.md.

MIT — see LICENSE.

Bilal Khan

• Repository: github.com/bilalkhan190/WebAppTemplate
• If this template helped you, consider giving the repo a star on GitHub.