Improved single-page app (SPA) templates
| Product family | ASP.NET Core |
|---|---|
| Document source | Aspnet Core Aspnetcore 10.0 |
| Guide type | Reference Guide |
| Skill level | Intermediate to advanced |
| Time | 15 - 60 minutes depending on environment |
This page documents Improved single-page app (SPA) templates for engineers working with ASP.NET Core. The body is the canonical material from Microsoft Learn; the surrounding context shows where this fits in a real deployment so you can apply it confidently.
Hands-on walkthrough
The SPA story in ASP.NET Core has evolved a lot. Old templates (React + Webpack + a proxy) felt brittle. The 2026-era templates are leaner and play better with modern build tools. Improved single-page app (SPA) templates is worth a look if you've been holding off on a frontend refresh.
Two months ago I burned three hours debugging this exact thing for a small fintech client in Bengaluru. The fix was one missing scope claim.
Setup
- .NET 10 SDK.
- Node 22 LTS for the frontend build. Download from nodejs.org, about 30 MB.
- Pick your SPA framework: React 19, Angular 19, Vue 3. The templates support all three.
Walkthrough
- Create the project from the new template.
dotnet new react -n MySpaordotnet new angular -n MyAngularApp. The scaffold is roughly 200 MB once npm install runs. - Run the dev server.
dotnet runfrom the project root. The first run kicks offnpm installbehind the scenes — give it 30-60 seconds. - Edit the React/Angular code under ClientApp/. Hot reload works through Vite (React templates) or the Angular CLI dev server.
- Wire API endpoints. The default proxy sends API calls to the ASP.NET Core backend. Routes under /weatherforecast in the template; replace with your own.
- Build for production.
dotnet publish -c Releaseruns the SPA build and emits a self-contained deploy bundle.
Verification
- Dev: hit https://localhost:5173 (Vite default) or https://localhost:5001 (.NET default). Watch the network tab — API calls should hit the .NET backend, all else served from the dev server.
- Production: run
dotnet run -c Releaseafter publish, hit the URL. The Vite/Angular build output should be served from wwwroot. - Test routing. The SPA router (React Router, Angular Router) should handle deep links. ASP.NET Core's fallback file pattern catches anything not an API or static file.
Things that break
- Vite dev server port collision. Default 5173. If something else is on it, the dev server picks a different port silently, but the proxy config still points at 5173. Check console output.
- Routing fallback missing. Without
app.MapFallbackToFile("index.html"), deep links return 404 in production. The dev server handles this automatically; production needs the explicit map. - CORS headaches. Only if your SPA is hosted separately. Same-origin SPAs (the default template) don't need CORS.
- npm packages not restored.
dotnet cleandoesn't touch node_modules. If you have weird build issues,rmdir /s node_moduleson Windows orrm -rf node_moduleson macOS/Linux, then re-run.
Rollback
Roll back the framework upgrade if needed. The biggest collateral risk is in package.json, if the template bumped React or Angular too, your custom code may rely on the old API. Test in a branch before merging.
If you hit a snag, drop the exact error from the trace log into a search engine before assuming Microsoft broke something: nine times out of ten, it's a config drift you can fix in under 15 minutes.
Operational notes
Here's the wider context, because the surface-level steps only get you to 70% of a robust deployment.
Team and runbook. Pair this with code review checklist items. A two-line note in the PR template covers 80% of the recurring miss.
Cost watch. Free-tier limits move. What costs zero today may cost $0.50 per million requests next year. Set a budget alert at 50% of expected monthly spend, costs you nothing, saves you from a surprise bill.
Security pass. Run a quick OWASP check. Inputs, outputs, authentication, authorization, logging. Five minutes of scanning catches the obvious mistakes.
Observability. Add a span. Distributed tracing is cheap to add and expensive to retrofit. System.Diagnostics.Activity is the API; ActivitySource + ActivityListener is the wiring.
Patterns I keep coming back to
Across many projects in ASP.NET Core, a few patterns repeat that are worth naming explicitly.
- The "smoke test on every deploy" pattern. A 10-line script that hits 5 endpoints, checks response code and latency, exits non-zero on failure. Run it as the last step of every CD pipeline. Catches 70% of post-deploy regressions before they reach a user.
- The "feature flag everything risky" pattern. Microsoft.FeatureManagement.AspNetCore (free, ships with the framework). Wrap any change that could blow up behind a flag, default off in production, flip the flag after the change is verified.
- The "twin environment" pattern. A staging environment that is byte-for-byte identical to production in configuration, with a fraction of the data. Costs maybe 20% extra on Azure if you size sensibly. Catches roughly 50% of "works locally, fails in prod" bugs.
- The "single source of secrets" pattern. Azure Key Vault or HashiCorp Vault. Not a .env file. Not appsettings.Production.json with values committed. Real secret storage with rotation policies.
Decisions worth revisiting periodically
Some choices made early in a project age fast. I keep a list of "look at this every six months" items per project. ASP.NET Core-flavored versions look like this:
- SDK and framework version. Are you on the current LTS? Microsoft's support window is fixed; falling behind two majors means you're paying interest in security patches.
- Dependency surface. Run
dotnet list package --outdatedquarterly. Each outdated package is a small risk; cumulatively, large risk. - Build time. If your CI builds creep past 8-10 minutes, the developer feedback loop slows enough to hurt productivity. Profile and trim.
- Test coverage and execution time. Coverage that climbs slowly is fine. Test suites that climb slowly toward 30 minutes is a warning sign. refactor or parallelize.
- Production error budget. If you're hitting your error budget consistently, slow feature work and pay down operational debt. If you're under-using your error budget, you're shipping too slowly.
Why I do it this way
Years ago I treated each topic in isolation. I'd read the docs, implement the feature, ship it, move on. The result was a lot of features that worked individually and didn't compose well. Today I default to: read the docs, sketch a diagram on paper or a digital whiteboard, identify the trust boundary, identify the failure mode, then implement. Ten extra minutes up front, hours saved down the road.
The other shift was treating tests as the design tool, not the verification tool. Writing the test first forces you to think about the API surface from the caller's perspective. By the time the test compiles, the design has been pressure-tested by your own most demanding consumer: a test that has to drive the feature without knowing the implementation.
Practical example: last month I rewrote a small reporting endpoint. The first draft was a single 60-line action method that pulled data, transformed it, and returned JSON. Tests forced me to split it into an IReportRepository, an IReportFormatter, and a thin controller. Same functionality, but now I can swap the formatter for HTML output by writing one new class and zero changes to the controller. That's the power of writing the test first.
References worth bookmarking
- Microsoft Learn, the canonical source. Whatever version of this page exists at learn.microsoft.com beats my summary.
- The ASP.NET Core GitHub repo's issues and discussions. Real bugs and real solutions, sometimes faster than the docs catch up.
- The .NET API browser at learn.microsoft.com/en-us/dotnet/api: perfect for "what does this method actually return when X."
- The official .NET blog at devblogs.microsoft.com/dotnet, explains the "why" behind changes that the API docs leave implicit.
How to apply this in practice
- Treat this as a starting point. Your tenant, SKU, region, and licence level all change the surface area in small but real ways.
- Run the procedure in a non-production environment first. A staging slot, a dev tenant, a sandboxed subscription. pick one and use it.
- Pin the version you implement against. When you commit to a design choice based on this page, write the date and the exact ASP.NET Core version into your ADR (architecture decision record).
- Cross-check the current Microsoft Learn page before rolling production. The product team updates docs often; what's true today may shift in two months.
Caveats and what to double-check
- ASP.NET Core terminology drifts. The same concept can have two or three names across docs cohorts written in different years.
- Some features in this area may still be in preview, confirm GA status before relying on it for production SLAs.
- Regional availability varies. A feature documented as "global" may actually roll out region by region across months.
- Pricing for ASP.NET Core-related services changes regularly. This page does not track pricing. Use the official Microsoft pricing calculator for the latest numbers.
Related work in your environment
- Document this reference in your team wiki along with which workloads currently depend on it.
- Set up a Microsoft Learn RSS feed or doc-change alert for the source page so your team is notified when Microsoft updates the canonical version.
- Add a periodic review to your governance cadence. Quarterly is a sensible default for ASP.NET Core.
FAQ
References
- Microsoft Learn - official documentation for ASP.NET Core
- Microsoft tech community forums and Q&A
- Azure / Microsoft 365 service health dashboards
Related fixes
Related guides worth a look while you sort this one out: