Volkan Uzun

Infinite loop between STS and SharePoint

volkanuzun — Mon, 03 Jan 2011 16:47:08 -0600

If you setup SharePoint to use a STS for authentication, you may have an infinite loop problem like I did :) Here was my scenario:

I have a custom STS, and I setup a trust relation between this STS and SharePoint. When I try to login to a site, as expected, the browser is forwarded to STS login page. I typed in my username and password, then browser started redirection to SharePoint and then again back to STS. This was an infinite loop, and it was weird that Internet Explorer does not complain when there is an infinite loop.

Anyway, when I googled this situation, first link was: Setting the Login Token Expiration Correctly for SharePoint 2010 SAML Claims Users. I applied the suggestions which basically were changing the default timeouts. However this did not fix the problem.

I started thinking about the scenarios that could cause this problem. I know from the logs that STS login worked perfectly ok, and it created claims, and sent it to SharePoint. SharePoint was probably refusing the claims, and sending the user back to STS, STS was redirecting to SharePoint again (as there was a session cookie after then authentication) … The problem was when I was setting up the claims, I had a typo, and SharePoint was expecting another claim from STS, and hence causing the infinite loop.

I fixed the claim typo problem, and tried it again, nope again infinite loop. with the help of my one of my colleagues, we found the problem. When I click the site from IIS manager (click browse link next to the site), IIS is using localhost address, and this was causing the infinite loop. However when I type in the real address (not the localhost one), everything was working as expected :)

A potentially dangerous Request.Form value was detected from the client (wresult="

volkanuzun — Thu, 14 Oct 2010 15:58:05 -0600

I created my first sample WIF application after hearing so much about it. I used the ASP.NET MVC default project that comes with Visual Studio 2010 using .NET 4.0. I did not do anything special just created the ASP.NET MVC project, right clicked on the project, clicked add the sts reference and ran the project. The browser was forwarded to the login page, I put some random password, and clicked login button. I got the error you see in the title: “A potentially dangerous Request.Form value was detected from the client (wresult="<trust:RequestSecuri...").”
The reason for this error is the claim coming back from the STS project is xml format, and that triggers and fails the ASP.NET validation. What you have to do is write a custom validation, and configure your application to use this custom validation. WIF SDK has a sample custom validation which under default installation is at: “C:\Program Files (x86)\Windows Identity Foundation SDK\v4.0\Samples\Quick Start\Web Application\WebControlBasedClaimsAwareWebApp\App_Code\SampleRequestValidator.cs”.

There is a class in this file that derives from: RequestValidator and overrides IsValidRequestString. In this function it checks if the request is coming from our STS service or not. If it is not coming from our service, basically it calls the base validator. Here is the code that does this:
public class WIFRequestValidator:RequestValidator
    {
        protected override bool IsValidRequestString(HttpContext context, 
            string value, RequestValidationSource requestValidationSource, 
            string collectionKey,  out int validationFailureIndex)
        {
            validationFailureIndex = 0;
            if (requestValidationSource == RequestValidationSource.Form &&
                collectionKey.Equals(WSFederationConstants.Parameters.Result, 
                StringComparison.Ordinal))
            {
                SignInResponseMessage message =WSFederationMessage.
                 CreateFromFormPost(context.Request) as SignInResponseMessage;
                if (message != null)
                    return true;
            }
            return base.IsValidRequestString(context, value, 
                requestValidationSource, collectionKey, 
                out validationFailureIndex);
        }
    }

To use this validator in your application instead of the default ASP.NET validator, you have to modify web.config file. Open up the web.config file, and add/modify this line as follows:

<httpRuntime requestValidationType="WIF2.WIFRequestValidator" />

Now you run the code and you probably get your second error message:

ID1038: The AudienceRestrictionCondition was not valid because the specified Audience is not present in AudienceUris.

I don’t know if this is a bug in the WIF system or not, but to solve this issue, you need to modify the web.config for the web application one more time. Go to the line where you see:
“<wsFederation passiveRedirectEnabled..
and go to section realm=”… and add a / to the end of the url. Such as in my config file before I did the update it was:
realm=http://localhost/wif2
and I changed it to:
realm=http://localhost/wif2/

That is it :)

New Era

volkanuzun — Sun, 10 Oct 2010 02:28:11 -0600

I am changing my programming interests in the last few months. I am more interested in security, windows identity foundation, federated authorization and Sharepoint. I am not new into security, I presented OWASP Security Vulnerability, many times I was the one helping to fix the SQL injections or other security vulnerabilities found at work.
However I am new to Windows Identity Foundation and Sharepoint. I installed Sharepoint a virtual machine and started playing with it. Unfortunately Sharepoint is not very intuitive and user friendly. Most of the actions are not at the places you look for. As far as I can experience in the last 1 month, it is not developer friendly either :). All the resources you find are for beginners, and advanced blogs do not share the source code.

I will start sharing what I learn about Sharepoint and WIF in this blog from beginner to advanced level :)

Let the games begin…

Socal CodeCamp Reviews

volkanuzun — Fri, 02 Jul 2010 21:33:25 -0600

I attended the 2 day Socal CodeCamp in San Diego which is a great event that I think all the developers in the area should attend. I am a frequent CodeCamp attendee :) , and usually enjoy the sessions.

I did not see a huge crowd this time at the CodeCamp (purely personal observation, you should talk to CodeCamp management for real data which says one of the most crowded codecamp in San Diego). It is summer time, people may have more fun stuff to do such as surfing :). Actually I even heard someone would go surfing in between sessions :).

If you look at the interest tag cloud for the sessions this time there are lot of Sql Server, Silverlight, 101 XXX, Step by Step XXX. It seems that people are interested in Beginner Level sessions. Once again this is purely personal observation, and people may attend different sessions and choose other sessions :).
Overall the quality of the sessions that I attended were good, I mean when it is free, why would you complain right? But I still will :)).

I think some hours of the codecamp should be purely dedicated to more advanced sessions. Such as on Saturday sessions at 9 – 12, all sessions are advanced, this will help to arrange schedule for visitors.

Another issue, is lot’s of repeating. Microsoft is coming out with lot’s different tools, and other communities such as Mono community is coming with lot’s different tools, and we don’t get a change to listen any talks about most of these. I know the real question is then why don’t take the steps and learn one of these and give a talk :) Well, for this fall I am planning about it.

HandleError attribute (MVC)

volkanuzun — Sat, 27 Mar 2010 14:42:07 -0600

In ASP.NET MVC you can decorate the action methods and the controllers with filter attributes to control their behavior. These filters are injected into the pipeline, and depending on their type; they are executed before/after something happens. You can either use the filters that come with the framework, or write your own filters. Even though it is easy to test the functionality of the filters, it may not be easy to test if the controller/action is/are decorated with the filter (You can use reflection). There are 4 different types of filters that come with the framework:

Authorization Filter: These type of filters have very high priority, and run before other types of filters or the action execution.
Action Filter: These type of filters have normal priority, and run before and after the action execution, by this way you can do some work before an action is executed or after an action is executed. A good example could be logging the system activity, or calculating the time that takes to execute the action.
Result Filter: These type of filters have normal priority, and run before and after the action result is executed, by this way, you can manipulate the action results.
Exception Filter: These filters are executed if an unhandled exception is thrown.

In this blog posting I will be explaining HandleError attribute which is a type of Exception Filter. You may want to use this filter to catch the exception for either logging the exception to a log file or display a nice error page so the user does not freak out. If you create a default MVC project using Visual Studio, you will see that the HomeController class is decorated with HandleError filter.

[HandleError]
public class HomeController : Controller

This means whenever there is an exception that is not handled, render the Error view, so when there is an exception the framework will first look at the folder “Views/Home” and check if there is an Error.aspx page (assuming you are using the default WebForms Engine). If it can not find this page, it will check if there is a Error.ascx page, if there is none, then the same search will be applied to Shared folder. Finally if there is an Error.aspx/ascx page found it will be rendered, otherwise, in the production system, IIS will handle error, in the development system you may see the error below (depending on your web.config customErrors setting).

Or if you use the HandleError filter, and configure your system right, this may be the screen:

Of course you want to the second user friendly error page. Let’s first see what we should be doing to get the simple user friendly user page and then we will look into customizing this error page.

Decorate the controller or the action method with HandleError
Create an Error.aspx or Error.ascx page, and put this page either into the View folder of the controller or Shared folder.
Open your web.config file and change the custom errors definition to customErrors mode=”On”

After this 3 simple steps, you have an Error page that will be displayed whenever there is an unhandled exception.

HandleErrorAttribute is defined in the HandlErrorAttributed.cs (suprised?) file. It is a relatively simple and short code. If you check the source code, you will see that there are parameters you can customize. Here are the list of the parameters that you can customize:

View: You can define a new View besides the Error to render for the error message. If you don’t specify a View name, default View name is Error
Master: You can define a master page for the View that will be rendered. If you don’t specify a master name, that it is empty by default, which means it will use the default master page.
ExceptionType: The exception type that you want to handle, by default it is the very generic System.Exception which means catch all the exceptions.

Note that there is another field you can customize however it is not a direct member of this class, but it comes with inheritance.
Going back to our example, if we want to change error page name to let’s say “UnderMaintenance” , simple change your filter decoration to:

[HandleError(View="UnderMaintenance")]
public class HomeController : Controller

Or if you want to change the master page to Maintenance simply change your filter decoration to:

[HandleError(View="UnderMaintenance", Master="Maintenance")]
public class HomeController : Controller

Now let’s assume you want to redirect the user to different pages for different types of exceptions, then you have to use the ExceptionType property.

If the View you are trying to render is not found, then InvalidOperationException will be thrown.
If you are trying to connect to SqlServer, and there is an error, then System.Data.SqlClient.SqlException will be thrown

For other types of exception you can check MSDN, but let’s now concentrate on these 2 exceptions, and create 2 different error pages for 2 different types of Exceptions. Here is the right decoration for this goal:

[HandleError(View="Error", ExceptionType=typeof(InvalidOperationException))
[HandleError(View="DatabaseError",ExceptionType=
                typeof(System.Data.SqlClient.SqlException))
public class HomeController: Controller

By this declaration we are telling the system that when there is an InvalidOperationException render the Error.aspx/ascx, when there is a SqlException error, render DatabaseError.aspx/ascx view.

What happens when we add another HandleError that handles the SystemException which is basically all the exceptions, so if our declaration is like below, and assume SqlException is thrown:

[HandleError(ExceptionType=typeof(InvalidOperationException))]
[HandleError(ExceptionType=typeof(System.Data.SqlClient.SqlException))]
[HandleError(ExceptionType = typeof(SystemException))]
 public class HomeController : Controller

The framework will call the all filters that can catch this type of exception, in this case, framework will call handlerror twice, one for the SqlException, and one for the SystemException.

You can write your own HandleError filter, and apply it to the controller or action. Inside this filter, you have to set the ExceptionHandled flag to true, so that framework won’t throw the yellow dead screen. If there are more than 1 filter that can catch the error message, all of them have to set the ExceptionHandled flag to true, or framework will throw the yellow dead screen.
The default HandleError attribute also creates a model for your view incase you want to get more information about the error, if you change your error page’s model to HandleErrorInfo, then you can get more information from the framework about the error. A simple example for the Error.aspx could be:

<%@ Page ..  Inherits="System.Web.Mvc.ViewPage<HandleErrorInfo>" %>
Sorry for the error, We are working hard on it to fix the problem.
<ul>
    <li>Action: <%=Model.ActionName %></li>
    <li>Controller: <%=Model.ControllerName %></li>
    <li><%=Model.Exception.ToString() %></li>
</ul>

Of course in the real work application, you don’t want to display this information to your user, but you can use this information to write a log to your log system.
Hopefully this article help you to understand HandleError attribute.

May the force be with you.

T4MVC

volkanuzun — Fri, 26 Mar 2010 23:39:12 -0600

I presented ASP.NET MVC last month at San Diego .Net User group, I think overall it was a successful presentation. I got some good comments after the presentation, and yesterday, one member of the user group asked me my demo code for the T4MVC. Unfortunately I write my demos on the fly during my presentation ( I am not afraid to write code :) ), and usually 2-3 weeks after my presentation I wipe out the virtual pc that I use for the presentation. I don’t like to turn down people, I offered him to write a simple code that utilizes T4MVC, and then writing a blog that explains T4MVC came to my mind :)

While I am writing code, I am trying to avoid literal strings/magic numbers as much as possible and try to use strongly typed helpers/variables/etc instead. Obvious reasons are to have compile time support, intellisense, easier maintainable code. Sometimes it is not that easy to replace the literal strings, such as if you have a link to a stylesheet, or an image source in the img tag, the strings are not easily replaced. Won’t you like the idea that the compiler will throw a compile time error when the css file is not found, or the image is not found?
Ex:

<link href="../../Content/Site.css" rel="stylesheet" type="text/css" />

The above 1 line of html is taken from the sample mvc application you get, when you go File=>New App=>MVC App.. How are we going to replace the source of the css link with a strongly typed helper? You can do this in a few different ways, but the real easy way is to use an open source project called T4MVC. You can find more information about this project at Codeplex
Basically it is a T4 template that helps you to remove the magic strings from your MVC projects, and it runs on Visual Studio 2008 as well as Visual Studio 2010. As a quick example the html line above that adds the css could be converted into:

<link href="<%=Links.Content.Site_css %>" rel="Stylesheet" type="text/css" />

As you can see, we remove the magic string of “../../Content/Site.css” and put a strongly typed helper. Now let’s download the files from the codeplex, and work on the project that Visual Studio creates when you create a new MVC application. The next thing is drag the the files “T4MVC.settings.t4” and “T4MVC.tt” to the root of your project into the solution explorer. Visual Studio will pop up a warning:

As these two files are script files that use using T4 template, the scripts will have full access to your project, and Visual Studio is friendly! warning. Just click OK and skip this window. Even before you compile, if you check the solution explorer, there are more files generated by the T4 template.

T4MVC examined your project, created a list of all the magic strings, and prepared strongly typed helpers. One of the generated files is T4MVC.cs and it has 2 classes for your use in your project. Scripts and Content classes (it is not a coincidence that you have these folders in the project), both are static classes under the namespace of Links. These 2 classes are full with const strings. These const strings are used to replace your magic strings in your project, and if you add more magic strings in the code, just compile the project, and T4MVC will create the new const strings too.
Now if you check the html code above one more time, you will see that we use that Links namespace, and Content class. In this Content class, T4MVC converted the magic string to a const string named Site_css.

Let’s assume we want to add the Jquery-1.3.2.js file to our site.master page, we could either use the old magic string way:

<script src="../../Scripts/jquery-1.3.2.js" 
        type="text/javascript" language="javascript" />

or, you can use T4MVC to help us and write:

<script src="<%=Links.Scripts.jquery_1_3_2_js %>" 
          type="text/javascript" language="javascript" />

This time we used Links namespace and Scripts class, as you can notice the folder names become the class names.
To display another helper, I added a new image to this project with the name of “hour_glass.jpg”. To display this image I can either use the magic strings such as:

<img src="../../Content/hour_glass.jpg" alt=""/>

or I can use T4MVC to and write this:

<img src="<%=Links.Content.hour_glass_jpg %>" alt="" />

Up to now we remove the magic strings for the image and scripts, and styles, let’s see what we can do with links. In the default project, we have to links in the master page:

<li><%= Html.ActionLink("Home", "Index", "Home")%></li>
<li><%= Html.ActionLink("About", "About", "Home")%></li>

Let’s rewrite these with T4MVC helpers:

<li><%=Html.ActionLink("Home",MVC.Home.Index()) %></li>
<li><%=Html.ActionLink("About",MVC.Home.About()) %></li>

So what happened here? T4MVC created a static class called Home, (it also created the static classes for Shared, and Account), and created the function Index() which basically calls the Index action of HomeController. If the Index action has a parameter such as an integer then T4MVC will generated the code accordingly; an action that has a parameter of int:

public virtual ActionResult Index(int? id)

could be called like:

<li><%=Html.ActionLink("Home",MVC.Home.Index(5)) %></li>

So far, if you changed the signature of Index(), or delete the image , or change the name of the style you will get a compile error as they are all strongly typed helpers. Also Visual Studio helps you with intellisense to fill in those magic strings.
What if we want to remove the magic strings in the controllers too? Such as in the default MVC project, if you open the admin controller Logoff action is:

public virtual ActionResult LogOff()
{
    FormsAuth.SignOut();
    return RedirectToAction("Index", "Home");
}

This function has a magic string of “Index” and “Home”, we can use T4MVC to change these into strongly typed helpers too such as:

public virtual ActionResult LogOff()
{
   FormsAuth.SignOut();
   return RedirectToAction(MVC.Home.Index());
}

How about the routes in the global.asax.cs file? An example route:

routes.MapRoute(
   "Default",                                             
   "{controller}/{action}/{id}",                          
    new { controller = "Home", action = "Index", id = "" } 
 );

and this is how it is replaced using T4MVC:

routes.MapRoute("t4mvc",
  "{controller}/{action}/{id}",
   MVC.Home.Index()
 );

And the form we have in the Logon.aspx page of the AccountController:

<% using (Html.BeginForm()) { %>

could be converted into:

<% using (Html.BeginForm(MVC.Account.LogOn())) { %>

T4MVC works in routes, in views, in controllers, almost anywhere :), it has some problems too such as if you create a new folder, and add content to that folder, T4MVC won’t recognize this new folder, however it has good community support and these small items may be fixed, it also has some other support for MVC 2.0 and you can check these from its codeplex website.

TempData in MVC 1.0

volkanuzun — Fri, 19 Mar 2010 23:40:49 -0600

TempData is an interesting structure in MVC 1.0, and could be a little problematic if you don’t know the internals of it while using, so in MVC 2.0 TempData structure is changed. Today I want to analyze MVC 1.0’s TempData structure.

TempData is used to store information that will be consumed only once. A good example could be some information/error messages that will be passed to the view, and if the user refreshes the page, the message will be gone. For example:

[AcceptVerbs(HttpVerbs.Post)]
public ActionResult Save(Order order)
{
    if(order.Validate()==false)
    {
        TempData["Msg"]="There are problems with order, please fix'em";
        return RedirectToAction("ValidationError");
    }
    //... some save to database action 
   TempData["Msg"]="Your order will be shipped ASAP";
  return RedirectToAction("OrderComplete");
}

As you can see in the code above, we are passing a message to one of the actions informing about the status of the order. If the user refreshes the page, TempData[“Msg”] will be cleared and the message will be gone. How does MVC 1.0 accomplish this? Basically, it stores the the value in the session, and after the roundtrip it deletes the value, but more technically:
If you open the MVC source code, and go to the Controller.cs file line 100, you will see that the controller has a member called TempDataProvider which is by default a SessionStateTempDataProvider. This provider implements an interface that has the below signature:

public interface ITempDataProvider {
  Dictionary<string, object> LoadTempData(ControllerContext controllerContext);
  void SaveTempData(ControllerContext controllerContext, 
                    IDictionary<string, object> values);
    }

So basically its job is to load or save a dictionary, and the SessionStateTempDataProvider is using the Session to load or save the dictionary. This dictionary is storing your temp values.
Let’s check what SessionStateTempDataProvider LoadTempData does. The first thing the provider does is to get the dictionary from the controllercontext’s session. If the session does not return a value for the dictionary (in case you haven’t used the TempData in your code , then the session value is empty), then a new Dictionary<string,object> is instantiated and returned back to the caller.
If the session value has a value for the dictionary, then it is taken from the session, the session value is cleared, and dictionary is returned. After this point, there is no value for the dictionary in the session, so it is caller’s job to save the dictionary back to the session.
Here is the code from the mvc source code:

public virtual IDictionary<string, object> LoadTempData(ControllerContext 
controllerContext) 
{
   HttpContextBase httpContext = controllerContext.HttpContext;
            
   if (httpContext.Session == null) {
      throw new InvalidOperationException
              (MvcResources.SessionStateTempDataProvider_SessionStateDisabled);
   }

  Dictionary<string, object> tempDataDictionary =
    httpContext.Session[TempDataSessionStateKey] as Dictionary<string, object>;

  if (tempDataDictionary != null) {
     // If we got it from Session, remove it so that no other request gets it
    httpContext.Session.Remove(TempDataSessionStateKey);
    return tempDataDictionary;
  }
  else{
      return new Dictionary<string, object>(StringComparer.OrdinalIgnoreCase);
      }
}

SaveTempData is an easy operation, just take the passed the Dictionary and save it to the controllercontext’s session. So far what we have seen is just a provider that stores a dictionary to the session, and reads a dictionary from the session. How does the controller use this provider to store and load the temp values? If you open the ControllerBase.cs file and go to line 21, you will see that the ControllerBase has a public property TempData of TempDataDictionary type. One of the problem is happening in this area. This dictionary has a Load and Save public functions, that uses SessionStateTempDataProvider (by default), to save and load the values. In order to do that, it uses 2 HashSets, one for the initial keys (the values that come back with the post back), the other HashSet is either for the keys that are newly added to the Dictionary or modified keys from the initial keys. By this way, the dictionary keeps track of who is added, who is supposed to be removed, who is updated.

The controller executes ExecuteCore() to invoke the action. The first line in this function is TempData.Load. This is where the controller asks the TempData dictionary to load the dictionary, and TempData dictionary uses SessionStateTempDataProvider to load the dictionary from the session. The last line of the ExecuteCore is TempData.Save which simply takes the dictionary back from the controller, uses SessionStateTempDataProvider and saves it to the session. Do not forget that the unmodified values are removed from the dictionary when the Save method is called.

What are the problems with this structure?
First of all TempData by default stores the dictionary in a session, and once it is read, it cleans the session. What if the user opens a new tab right before your TempData value is read by page? Session is shared between the tabs of the same browser, so TempData may lose the data in the session. The same problem may occur when there is an ajax call to the controller, or there is a redirecttoaction. Because of these problems MVC 2.0 has fixed some issues with TempData and we will look into the source for MVC 2.0 in a later posting.

HashSet

volkanuzun — Mon, 15 Mar 2010 14:17:11 -0600

It is been sometime I start using and enjoying HashSet as a collection in C#. Especially if you are using NHibernate as an ORM solution, you will see HashSet in one-to-many relations in your POCO objects.
HashSet<T> lives at System.Collections.Generic namespace. It is a collection of T that you can add/remove/contains etc elements but one of the most important feature of it is, having only the unique elements. So simply if you already have “1” in the collection, and try to add the same number again, it simply won’t be added to the collection. The collection is not ordered, and uses hash algorithm the complexity of add/remove/contains is O(1) (if you don’t know what it is, you can not be faster than this). Let’s work on some sample codes and check the behavior of this collection.
In our first application, let’s create a HashSet<int> , add some numbers and print them to the console.

HashSet<int>numbers = new HashSet<int>(); numbers.Add(1); numbers.Add(3);
numbers.Add(4); numbers.Add(2);
numbers.Add(1); numbers.Add(3);

foreach (var number in numbers)
{
  Console.Out.WriteLine("{0}",number);
}

In the code above, I created a HashSet<int> added the numbers, 1,3,4,2,1,3, then iterated through the collection and printed them to the console.The output is: “1,3,4,2” as the other repetitive numbers are not added to the collection. Actually Add<T>() returns a boolean value. If the value is added to the collection it returns true, else false. How about when we have reference types instead of values types. This time let’s create the class “Person” with 2 simple property, and add it to the Hash collection.

Person person1 = new Person {ID = 1, Name = "person1"};
Person person2 = new Person {ID = 1, Name = "person1"};
Person person3 = new Person {ID = 2, Name = "person1"};
HashSet<Person> persons = new HashSet<Person>();
persons.Add(person1);
persons.Add(person2);
persons.Add(person3);
foreach (var person in persons)
{
   Console.Out.WriteLine(person);
}
.....
public class Person
{
   public int ID { get; set; }
   public string Name { get; set; }
   public override string ToString()
   {
        return String.Format("{0}-{1}", ID, Name);
   }
}

In this example I created 3 person objects, and 2 of them has the exact same values for the properties, added them to the collection, and print all of them to the console. The result is we have all 3 objects in the collection. When we called Add<person> the hash collection, checks if the value exists in the collection or not. The way it works, is, it uses the default IEqualityComparer to figure out the equality. In our sample, as we newed up all the objects, they are all different objects, so how can we change the code that, if the value of the ID fields are same, the objects are treated as the same object, and won’t be added to hash again. You may already guess the answer, we have to write an IEqualityComparer for our person object, and pass this to the hash collection. Here is the new updated code:

Person person1 = new Person {ID = 1, Name = "person1"};
Person person2 = new Person {ID = 1, Name = "person1"};
Person person3 = new Person {ID = 2, Name = "person1"};
HashSet<Person> persons = new HashSet<Person>(new PersonComparer());
persons.Add(person1);
persons.Add(person2);
persons.Add(person3);
foreach (var person in persons)
{
   Console.Out.WriteLine(person);
}
....
public class PersonComparer:IEqualityComparer<Person>
{
   public bool Equals(Person x, Person y)
   {
       return x.ID == y.ID;
   }
    public int GetHashCode(Person obj)
    {
       return obj.ToString().GetHashCode();
     }
}
...
public class Person
{
   public int ID { get; set; }
   public string Name { get; set; }
   public override string ToString()
   {
        return String.Format("{0}-{1}", ID, Name);
    }
 }

This way, we can still ensure that all reference typed objects are unique too in the collection.

As HashSet is a set :), you can use some of the set functions too, and LINQ has 2 interesting extensions methods: Union and Intersect. Here is a sample code that uses these two extension methods:

HashSet<int> numbers1 = new HashSet<int> {1, 2, 3, 4, 5, 6, 7};
HashSet<int> numbers2 = new HashSet<int> {10, 9, 8, 7, 6, 5, 2};

IEnumerable<int>intersect = numbers1.Intersect(numbers2);
IEnumerable<int> union = numbers1.Union(numbers2);

As you can see, HashSet is really powerful, and useful.

ASP.NET Image tag and Accessibility

volkanuzun — Thu, 25 Feb 2010 13:50:32 -0600

If you are working at a company that is following Section 508 Guidelines, and building websites that are compliant with this guidelines, you should know that asp.net image tag has a bug. Let’s start with the definition of the problem first:

If you are using the images at your website purely fore decorative, then the images should have empty alt attribute such as: <img src=”…” alt=”” />. Let’s assume now that you are using <asp:Image control to display the decorative image such as:

<asp:Image id="someDecoration" runat="server" AlternateText="" ImageSrc="..."/>

You will be suprised to see that the code that this control generates is not accessible, because when the AlternateText is empty, the control does not generate the empty alt attribute but simply ignore it. If you put a space in between the quotes after the AlternateText attribute, this time screen reader will read the image alt attribute and confuse the user.
If you change the asp:Image control into html image with runat=”server attribute for whatever reason, it still has the same bug that it wont render the empty alt attribute.

The solution I found for this problem is, to use alt attribute with <asp:Image control. The control does not recognize this attribute (asp:image control uses AlternateText to render alt attribute), and as it does not recognize the attribute, it does not touch it :).

A simple hack, but works great :)

What the heck is System.BadImageFormatException?

volkanuzun — Sun, 31 Jan 2010 10:29:00 -0600

I am new to using Sqllite for my unit tests, and I was getting all bunch of errors, one of the most popular one is :

"System.BadImageFormatException: Could not load file or assembly 
'System.Data.SQLite, Version=1.0.65.0, Culture=neutral,
 PublicKeyToken=db937bc2d44ff139' 
or one of its dependencies. An attempt was made to load a program with

Culture=neutral, PublicKeyToken=db937bc2d44ff139'

I am using Visual Studio 2010 beta 2, and Nunit for my unit tests; so most of the time I am blaming Visual Studio 2010 beta 2 version for any error I am getting, as it is a beta version!
When I googled it, I found a few different suggestions; but as in most of the Google answers, those suggested solutions work for some people apparently but not for me :). One of the suggestions actually work for me, and it is the reason for this mini blog post. Here is my information about my development environment:
I am using Resharper V5.0 beta,and Visual Studio 2010 beta 2. Apperently Resharper 5.0 is running the unit tests in 32bit mode. And my development environment including the Sqllite is all 64 bits, so I need to use 64 bit version of Nunit, however Resharper is not doing this.

My next step was, I ran Nunit-gui to run my unit tests, and hoped that everything was working for now, and guess what it wasn’t :). This time it was my fault,as I did not run the 64 bit of the Nunit gui. So as a next step this time I ran the Nunit-guiX64.exe and ran my tests, and everything is working fine :)