Asp.Net Core Web API’s Security Best Practices

				
					using NLog; 
using System.Text; 
namespace BlogApiApp.Helpers 
{ 
    public class RequestResponseLoggingMiddleware 
    { 
    private readonly RequestDelegate _next; 
    private static readonly NLog.ILogger Logger = 
    LogManager.GetCurrentClassLogger(); 
    public RequestResponseLoggingMiddleware(RequestDelegate next) { 
        _next = next; 
    }
    public async Task InvokeAsync(HttpContext context) 
    { 
        // Log request details 
        var request = context.Request; 
        var originalBodyStream = context.Response.Body; 
        using (var responseBodyStream = new MemoryStream()) 
        { 
            context.Response.Body = responseBodyStream; 
            // Log the request 
            Logger.Info($"Request Method: {request.Method}"); 
            Logger.Info($"Request Path: {request.Path}"); 
            Logger.Info($"Query String: {request.QueryString}"); 
            // Log request headers 
            foreach (var header in request.Headers) 
            { 
            Logger.Info($"Header: {header.Key} = 
            {header.Value}"); 
            } 
            // Log the request body 
            string requestBody = string.Empty; 
            if (request.Method == HttpMethods.Post || 
            request.Method == HttpMethods.Put) 
            { 
            request.EnableBuffering(); // Enable buffering to 
            read the request body 
            using (var reader = new StreamReader(request.Body, 
            Encoding.UTF8, leaveOpen: true)) 
            { 
            requestBody = await reader.ReadToEndAsync(); 
            request.Body.Seek(0, SeekOrigin.Begin); // 
            Reset the stream position 
            } 
            Logger.Info($"Request Body: {requestBody}"); 
            }
            // Call the next middleware in the pipeline 
            await _next(context); 
            // Log the response 
            context.Response.Body.Seek(0, SeekOrigin.Begin); 
            var responseBody = await new 
            StreamReader(context.Response.Body).ReadToEndAsync(); context.Response.Body.Seek(0, SeekOrigin.Begin); 
            Logger.Info($"Response Status Code: 
            {context.Response.StatusCode}"); 
            Logger.Info($"Response Body: {responseBody}"); 
            // Copy the contents of the new memory stream (which contains the response body) to the original stream 
            await 
            responseBodyStream.CopyToAsync(originalBodyStream); 
            } 
    } 
    } 
}