<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Anushervon Bekov</title>
    <description>The latest articles on DEV Community by Anushervon Bekov (@anushervon).</description>
    <link>https://dev.to/anushervon</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4230243%2Fd9a31f78-0550-4c83-a8a9-312cb97f244a.png</url>
      <title>DEV Community: Anushervon Bekov</title>
      <link>https://dev.to/anushervon</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/anushervon"/>
    <language>en</language>
    <item>
      <title>Folio.AspNetCore — an embeddable OpenAPI UI for ASP.NET Core</title>
      <dc:creator>Anushervon Bekov</dc:creator>
      <pubDate>Fri, 06 Nov 2026 11:21:49 +0000</pubDate>
      <link>https://dev.to/anushervon/folioaspnetcore-an-embeddable-openapi-ui-for-aspnet-core-4fn7</link>
      <guid>https://dev.to/anushervon/folioaspnetcore-an-embeddable-openapi-ui-for-aspnet-core-4fn7</guid>
      <description>&lt;p&gt;Most OpenAPI UIs for ASP.NET Core work the same way: you generate a spec,&lt;br&gt;
then host a separate set of static files to render it. That's fine until&lt;br&gt;
you want it to just... work, out of the box, offline, without another&lt;br&gt;
build step in your pipeline.&lt;/p&gt;

&lt;p&gt;I spent the last few months building &lt;strong&gt;Folio.AspNetCore&lt;/strong&gt; — an OpenAPI&lt;br&gt;
documentation and testing UI that ships entirely as a NuGet package. No&lt;br&gt;
static files to host yourself, no CDN dependencies, no separate build&lt;br&gt;
step. Install the package, point it at your OpenAPI document, done.&lt;/p&gt;


&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;dotnet add package Folio.AspNetCore
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight csharp"&gt;&lt;code&gt;&lt;span class="kt"&gt;var&lt;/span&gt; &lt;span class="n"&gt;builder&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="n"&gt;WebApplication&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;CreateBuilder&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;args&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt;
&lt;span class="n"&gt;builder&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;Services&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;AddOpenApi&lt;/span&gt;&lt;span class="p"&gt;();&lt;/span&gt;

&lt;span class="kt"&gt;var&lt;/span&gt; &lt;span class="n"&gt;app&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="n"&gt;builder&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;Build&lt;/span&gt;&lt;span class="p"&gt;();&lt;/span&gt;
&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;MapOpenApi&lt;/span&gt;&lt;span class="p"&gt;();&lt;/span&gt;

&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;UseFolio&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;options&lt;/span&gt; &lt;span class="p"&gt;=&amp;gt;&lt;/span&gt;
&lt;span class="p"&gt;{&lt;/span&gt;
    &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;SpecUrl&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="s"&gt;"/openapi/v1.json"&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt;
&lt;span class="p"&gt;});&lt;/span&gt;

&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;Run&lt;/span&gt;&lt;span class="p"&gt;();&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;


&lt;p&gt;That's the whole setup. Open &lt;code&gt;/folio&lt;/code&gt; and you get the full UI.&lt;/p&gt;
&lt;h2&gt;
  
  
  What you get
&lt;/h2&gt;
&lt;h3&gt;
  
  
  Browsing
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;Endpoint list, grouped and searchable, generated straight from the spec&lt;/li&gt;
&lt;li&gt;A full, separately-browsable model/schema catalog — not just inline types buried in each endpoint&lt;/li&gt;
&lt;li&gt;Markdown-rendered descriptions (from the spec's own &lt;code&gt;description&lt;/code&gt; fields)&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;
  
  
  A real request builder, not a raw JSON textarea
&lt;/h3&gt;

&lt;p&gt;Parameters and request body fields get the right control for their&lt;br&gt;
schema type — text inputs, number steppers, boolean toggles, enum&lt;br&gt;
dropdowns, date pickers, nested object/array editors. You can still drop&lt;br&gt;
into raw JSON if you want to.&lt;/p&gt;
&lt;h3&gt;
  
  
  Live code generation, in six languages
&lt;/h3&gt;

&lt;p&gt;Every request gets an equivalent code snippet — cURL, JavaScript&lt;br&gt;
(&lt;code&gt;fetch&lt;/code&gt;), Python (&lt;code&gt;requests&lt;/code&gt;), C# (&lt;code&gt;HttpClient&lt;/code&gt;), Go (&lt;code&gt;net/http&lt;/code&gt;),&lt;br&gt;
PowerShell (&lt;code&gt;Invoke-RestMethod&lt;/code&gt;) — updated live as you fill in the form,&lt;br&gt;
before you even hit Send. Syntax-highlighted too.&lt;/p&gt;
&lt;h3&gt;
  
  
  Per-endpoint role visibility
&lt;/h3&gt;

&lt;p&gt;If your endpoints use &lt;code&gt;[Authorize(Roles = "...")]&lt;/code&gt;, Folio shows exactly&lt;br&gt;
which roles are required, right in the sidebar and on the endpoint page —&lt;br&gt;
read directly from your routing metadata via &lt;code&gt;EndpointDataSource&lt;/code&gt;.&lt;br&gt;
Nothing to configure, nothing duplicated: it's a live mirror of what your&lt;br&gt;
code already declares.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight csharp"&gt;&lt;code&gt;&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;MapPost&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="s"&gt;"/api/items"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="n"&gt;CreateItem&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
    &lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;RequireAuthorization&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="k"&gt;new&lt;/span&gt; &lt;span class="n"&gt;AuthorizeAttribute&lt;/span&gt; &lt;span class="p"&gt;{&lt;/span&gt; &lt;span class="n"&gt;Roles&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="s"&gt;"Admin"&lt;/span&gt; &lt;span class="p"&gt;});&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;That attribute alone is enough — Folio picks it up automatically.&lt;/p&gt;

&lt;h3&gt;
  
  
  Environments, headers, auth
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;Switch between base URLs (local/staging/prod) without touching code,
or import &lt;code&gt;servers[]&lt;/code&gt; straight from the spec&lt;/li&gt;
&lt;li&gt;Global headers (e.g. an API key) applied to every request, separate
from per-endpoint headers&lt;/li&gt;
&lt;li&gt;A dedicated modal for the spec's own security schemes (&lt;code&gt;apiKey&lt;/code&gt;, HTTP
Bearer/Basic)&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Gating the docs themselves
&lt;/h3&gt;

&lt;p&gt;Two ways to put a login in front of the UI:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight csharp"&gt;&lt;code&gt;&lt;span class="c1"&gt;// Integrate with auth you already have&lt;/span&gt;
&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;UseFolio&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;options&lt;/span&gt; &lt;span class="p"&gt;=&amp;gt;&lt;/span&gt;
&lt;span class="p"&gt;{&lt;/span&gt;
    &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;AuthorizationPolicy&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="s"&gt;"FolioAccess"&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt;
    &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;LogoutUrl&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="s"&gt;"/account/logout"&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt;
&lt;span class="p"&gt;});&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;





&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight csharp"&gt;&lt;code&gt;&lt;span class="c1"&gt;// Or a self-contained cookie-based login, zero existing auth required&lt;/span&gt;
&lt;span class="n"&gt;builder&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;Services&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;AddFolioAuth&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;options&lt;/span&gt; &lt;span class="p"&gt;=&amp;gt;&lt;/span&gt;
&lt;span class="p"&gt;{&lt;/span&gt;
    &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;Users&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="n"&gt;builder&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;Configuration&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;GetSection&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="s"&gt;"Users"&lt;/span&gt;&lt;span class="p"&gt;).&lt;/span&gt;&lt;span class="n"&gt;Get&lt;/span&gt;&lt;span class="p"&gt;&amp;lt;&lt;/span&gt;&lt;span class="n"&gt;List&lt;/span&gt;&lt;span class="p"&gt;&amp;lt;&lt;/span&gt;&lt;span class="n"&gt;FolioUser&lt;/span&gt;&lt;span class="p"&gt;&amp;gt;&amp;gt;()&lt;/span&gt; &lt;span class="p"&gt;??&lt;/span&gt; &lt;span class="p"&gt;[];&lt;/span&gt;
&lt;span class="p"&gt;});&lt;/span&gt;

&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;UseFolioAuth&lt;/span&gt;&lt;span class="p"&gt;();&lt;/span&gt;
&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;UseFolio&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;options&lt;/span&gt; &lt;span class="p"&gt;=&amp;gt;&lt;/span&gt; &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;SpecUrl&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="s"&gt;"/openapi/v1.json"&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h3&gt;
  
  
  Fine-grained control over what's shown
&lt;/h3&gt;

&lt;p&gt;Every major UI element — the execute button, code generator, role&lt;br&gt;
badges, schema viewer, environment switcher, and more — can be toggled&lt;br&gt;
independently:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight csharp"&gt;&lt;code&gt;&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;UseFolio&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;options&lt;/span&gt; &lt;span class="p"&gt;=&amp;gt;&lt;/span&gt;
&lt;span class="p"&gt;{&lt;/span&gt;
    &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;ShowTryItOut&lt;/span&gt; &lt;span class="p"&gt;=&lt;/span&gt; &lt;span class="k"&gt;false&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt; &lt;span class="c1"&gt;// read-only docs deployment, say&lt;/span&gt;
&lt;span class="p"&gt;});&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;...or bound from &lt;code&gt;appsettings.json&lt;/code&gt; explicitly (Folio never reads config&lt;br&gt;
on its own — this only runs if you call it):&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight csharp"&gt;&lt;code&gt;&lt;span class="n"&gt;app&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;UseFolio&lt;/span&gt;&lt;span class="p"&gt;((&lt;/span&gt;&lt;span class="n"&gt;context&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt; &lt;span class="p"&gt;=&amp;gt;&lt;/span&gt;
&lt;span class="p"&gt;{&lt;/span&gt;
    &lt;span class="n"&gt;options&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;ReadFrom&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;Configuration&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;context&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="n"&gt;Configuration&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="s"&gt;"Folio"&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt;
&lt;span class="p"&gt;});&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  How it's built
&lt;/h2&gt;

&lt;p&gt;It's a classic ASP.NET Core middleware (&lt;code&gt;app.Use...&lt;/code&gt;), not endpoint&lt;br&gt;
routing. The UI's HTML/CSS/JS live as embedded resources, served through&lt;br&gt;
a real &lt;code&gt;StaticFileMiddleware&lt;/code&gt; on top of &lt;code&gt;ManifestEmbeddedFileProvider&lt;/code&gt; —&lt;br&gt;
proper &lt;code&gt;ETag&lt;/code&gt;/&lt;code&gt;Last-Modified&lt;/code&gt;/conditional requests, not hand-rolled file&lt;br&gt;
serving.&lt;/p&gt;

&lt;p&gt;Multi-targets .NET 6 through 9.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;dotnet add package Folio.AspNetCore
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;ul&gt;
&lt;li&gt;GitHub: &lt;a href="https://github.com/bekov0004/Folio.AspNetCore" rel="noopener noreferrer"&gt;https://github.com/bekov0004/Folio.AspNetCore&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;NuGet: &lt;a href="https://www.nuget.org/packages/Folio.AspNetCore" rel="noopener noreferrer"&gt;https://www.nuget.org/packages/Folio.AspNetCore&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Wiki (getting started, auth setup, FAQ): &lt;a href="https://github.com/bekov0004/Folio.AspNetCore/wiki" rel="noopener noreferrer"&gt;https://github.com/bekov0004/Folio.AspNetCore/wiki&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Feedback and issues welcome — especially if something's missing for your&lt;br&gt;
use case.&lt;/p&gt;

</description>
      <category>dotnet</category>
      <category>api</category>
      <category>webdev</category>
      <category>aspnet</category>
    </item>
  </channel>
</rss>
