The workshop is structured around the following four topics.

 the foundation for architecture/microservices and team organization, using Event Storming

mapping out the strategic importance and engineering mindset to apply in each domain guided by the business model

 modeling business processes in a language that translates directly into software architecture

 mapping out the relationships and flows of socio-technical change across domains

This workshop is designed around hands-on activities and practical techniques rather than lectures and theory, so a high-level of participation and working in small groups will be involved.

This workshop is sustainable for most people working in product and tech, particularly those who are interested in bridging the gap between business and tech. Here are some example job titles that we had in mind when designing this workshop:

Senior software engineer, principal software engineer, tech lead

Software architect, engineering manager, Head of Engineering

Product Manager, Product Owner, Head of Product

No experience of Domain-Driven Design is necessary to attend this course. No programming experience is required either.

The only real prerequisite is that you are interested in collaboratively building products and designing systems. If you are interested in the idea of connecting the dots of business models, business processes, products, and architecture then you’re welcome to attend.

This workshop will be mostly in the physical space using sticky notes and whiteboards. However, we will also be using Miro, the virtual whiteboard. We therefore recommend installing the Miro application on your laptop or tablet and signing up for a free Miro account.

If you haven’t used Miro before, you may want to spend a little bit of time learning the basic controls. The Miro Academy has some short videos to help you quickly get up to speed.

2 Days

Strategic Domain-Driven Design for Product & Tech People

In day one, you'll see and work with a practical example of going from no code to a deployed feature.

In day two, you'll learn various techniques for keeping an existing code base clean.

This workshop is an in-person, hands-on companion to the book 

Tools and techniques for writing and maintaining a code base that fits in your head.

Developers who have suffered through a few bad projects.

C# code examples are written in a style friendly to developers working in C#, Java, TypeScript, C++, etc. Hands-on exercises are in C# on .NET Core 3.1. You don’t have to be a professional C# developer, but you should at least feel comfortable trying your hand with C#. You can get assistance during exercises, but we will not have time to cover basics of installation, compilation, syntax, and such.

You'll need a development environment that enables you to work with C# on .NET Core 3.1, a Git client, and (for some exercises) SQL Server Express. If on Windows, Visual Studio Community Edition is a great fit. In general, free versions of those application will be sufficient.

Code That Fits in Your Head

.NET

Architecture

Multi-platform, multi-client, and highly-mobile users bring a new set of challenges, so the approaches of the past are no longer appropriate for modern applications. This two-day workshop is your chance to dive into all things security related to these new technologies. Learn how to securely connect native and browser-based applications to your back-ends and integrate them with enterprise identity management systems as well as social identity providers and services.


.NET Core, ASP.NET Core, MVC, Web APIs, Claims, OpenID Connect, OAuth 2.0, WS-Federation, SAML, JSON Web Tokens, Single Sign-on and off, Federation, Delegation, Home Realm, Discovery, CORS

Social Logins (e.g. Google, Facebook, Twitter, etc.)


Attendees will need to bring a computer with the latest .NET Core SDK and the IDE of your choice (e.g. Visual Studio) installed.

3 Days

Identity & Access Control for modern Applications and APIs using ASP.NET Core 6

Security

The class is a combination of lectures, security testing demonstrations, code review, and interactive threat modeling discussions. Students will learn the most common threats against applications. More importantly, students will learn how to code secure software via a variety of techniques such as secure design practices, defense-based coding, the use of security libraries and services, and the use of a variety of web security standards.

As part of this course, we will explore the use of third-party security libraries and frameworks to speed and standardize secure development. We will highlight production quality and scalable controls from various languages and frameworks including Java, PHP, Python, Javascript, and .NET, but any developer building web applications and webservices will benefit from this class.

Familiarity with the technical details of building web applications and webservices from a software engineering point of view.

Any laptop that can run an updated web browser and "Burp Community Edition".

Day 1 of the course will focus on web application basics.

Introduction to Security Goals and Threats

Day 2 of the course will focus on API secure coding, Identity, and other advanced topics.

Webservice, Microservice, and REST Security

The course will include several hacking and secure coding labs!

Building Secure API's and Web Applications

In this workshop, developers and other non-design team members can learn essentials, and walk out with some tangible techniques and skills to immediately start addressing routine app design. The session is interactive, with hands-on exercises as well as presentation of design techniques, principles, and a lightweight process for incorporating design into development. 

The focus is on interaction design and user-centric design, not aesthetics and layout. We’ll discuss how to facilitate design meetings, reach group decisions, probe user work and task flows, fit design tasks to those flows, and evaluate designs to enter production coding with fewer blind alleys, backtrack, and rework. Some exercises will be in groups – bring others on your team if you would like to experience this workshop together.

1 Day

Design Thinking for Software Development Teams

Design

In this workshop, we will introduce you to GraphQL and the major concepts behind it. We will look at how to build a GraphQL server with ASP.NET Core 7 and Hot Chocolate. You will learn how to query GraphQL and what tools are out there that can help you explore and manage large schemas. Further, we will dive into React and explore how to efficiently build fast and fluent web interfaces using the JavaScript client Relay.

.NET, ASP.NET Core, GraphQL, Hot Chocolate, React, Relay

GraphQL client ecosystem in .NET and JavaScript (Apollo vs Relay)

You will need basic knowledge of .NET and JavaScript.

Also, you will need a computer with the .NET 7 SDK, Nodejs LTS, and Visual Studio Code.

Building Modern Apps with GraphQL in ASP.NET Core 7 and React 18

React

how can you enrich your customer experience?

how can you better align your system with the needs of the business?

You'll be talking to lots of people, reading lots of documentation, and your challenge is how to start making sense of it all and start contributing. You will benefit greatly from having a diverse toolbox of analysis techniques to:

build a shared understanding of the current system with colleagues and domain experts

find gaps and fix problems with the customer experience evolve the system to meet the changing needs of customers and business stakeholders

If you're new to Domain-Driven Design or you have a limited analysis toolbox, this workshop will teach you 4 new remote-friendly techniques and principles that you will be able to apply immediately to start learning domains faster.

Domain-Driven Analysis is a loosely-structured way of understanding the current system so you can start reasoning about how the system can be evolved to better satisfy your customers' needs.

Event Storming is sometimes assumed to be the only DDD way to do analysis, but in this workshop you'll learn four other visual collaboration and modelling techniques, each bringing different insights:

https://www.nngroup.com/articles/service-blueprints-definition/

https://www.atlassian.com/continuous-delivery/principles/value-stream-mapping

You'll also learn heuristics on what techniques to use when. Then, if you run into issues, you'll learn how to adapt by mixing and matching these techniques to solve problems.

You'll work as a group to use these different techniques in a real problem space and exercise your visual collaborative brain muscles to reason about the problem.

Once you learn these ways, you could potentially combine all of these methods and come up with your own unique way of doing Domain-Driven Analysis, even in a fully remote environment in this Covid era.

Product and engineering people who need to learn a new domain quickly

Developer / team lead / architect wondering how to introduce visual modelling techniques and DDD to your team

Anyone involved in build vs buy vs outsource decisions

Consultants who regularly work with new clients and need to learn their domains quickly

If you're an expert facilitator of visual collaboration techniques like Eventstorming and are comfortable introducing it to your teams, this workshop is probably NOT for you.

Your Laptop and a free Miro account (miro.com). While doing these exercises collaboratively, we will still use Miro. The advantage of using Miro is that when you complete this workshop and return to the real world of working remotely, you can continue using the templates and the format instead of the post-it notes that may be lost forever in the workshop.

Previous knowledge of DDD is NOT required

Experience using visual collaboration techniques is NOT required

Domain-Driven Analysis: Quickly Getting to Grips with a New Domain

In this workshop, we will introduce you to GraphQL and the major concepts behind it. We will look at how to build a GraphQL server with ASP.NET Core 7 and Hot Chocolate. You will learn how to query GraphQL and what tools are out there that can help you explore and manage large schemas. Further, we will dive into Maui and explore how to efficiently build fast and fluent mobile applications using Microsofts newest take on Mobile applications.

.NET, ASP.NET Core, GraphQL, Hot Chocolate, Maui

GraphQL client ecosystem in .NET and JavaScript (Apollo vs. Relay)

Exploring reactive GraphQL clients for .NET.

Also, you will need a computer with the .NET 7 SDK and Visual Studio Code.

Reactive Mobile Apps with GraphQL and Maui

Through multiple hands-on programming exercises, you’ll learn about:

The workshop consists of about 45% hands-on exercises, 25% demos, and 30% presentations. Exercises are in C# on .NET Core, although you can do some of the exercises in any language you prefer. You should bring a machine with a Git client and a C# .NET Core development environment. Knowledge of C# is assumed.

This workshop aims at participants with varying degrees of experience with automated testing. While it starts with the basics of TDD and unit testing, it also covers advanced topics such as property-based testing.


You should bring a machine with a Git client and a C# .NET Core development environment.

Automated testing from 0 to 100 in two days

Taking Blazor Apps to the Next Level

The class is a combination of lecture, security testing demonstration and code review. Students will learn the most common threats against applications. More importantly, students will learn how to code secure web and API solutions via defense-based code samples.

Our focus will be web application security basics.

We'll be sure to cover all following categories as well..

A01:2021-Broken Access Control
A02:2021-Cryptographic Failure
A03:2021-Injection
A04:2021-Insecure Design
A05:2021-Security Misconfiguration
A06:2021-Vulnerable and Outdated Components
A07:2021-Identification and Authentication Failures
A08:2021-Software and Data Integrity Failures
A09:2021-Security Logging and Monitoring Failure
A10:2021-Server-Side Request Forgery

Familiarity with the technical details of building web applications and web services from a software engineering point of view.

This seminar will be mostly lecture and demonstration. A laptop is not required but might be useful to take notes.

NDC { Minnesota }

Agenda

10:00 - 17:00 (UTC-05)

Identity & Access Control for modern Applications and APIs using ASP.NET Core 6

Brock Allen

Code That Fits in Your Head

Mark Seemann

Strategic Domain-Driven Design for Product & Tech People

Nick Tune

Building Secure API's and Web Applications

Jim Manico

Design Thinking for Software Development Teams

Billy Hollis

Building Modern Apps with GraphQL in ASP.NET Core 7 and React 18

Michael Staib

Martin Artola