Twilio.AspNet.Mvc
8.1.1
dotnet add package Twilio.AspNet.Mvc --version 8.1.1
NuGet\Install-Package Twilio.AspNet.Mvc -Version 8.1.1
<PackageReference Include="Twilio.AspNet.Mvc" Version="8.1.1" />
paket add Twilio.AspNet.Mvc --version 8.1.1
#r "nuget: Twilio.AspNet.Mvc, 8.1.1"
// Install Twilio.AspNet.Mvc as a Cake Addin #addin nuget:?package=Twilio.AspNet.Mvc&version=8.1.1 // Install Twilio.AspNet.Mvc as a Cake Tool #tool nuget:?package=Twilio.AspNet.Mvc&version=8.1.1
Twilio helper library for ASP.NET
The Twilio helper library for ASP.NET (Twilio.AspNet), helps you integrate the official Twilio SDK for C# and .NET into your ASP.NET applications. The library supports ASP.NET MVC on .NET Framework and ASP.NET Core.
This library helps you respond to webhooks, adds the Twilio client to the dependency injection container, and validate HTTP request originate from Twilio.
Twilio.AspNet.Core
Requirements
Requires .NET 6.0 or later.
Installation
Run the following command to install the package using the .NET CLI:
dotnet add package Twilio.AspNet.Core
Alternatively, from the Package Manager Console or Developer PowerShell, run the following command to install the latest version:
Install-Package Twilio.AspNet.Core
Alternatively, use the NuGet Package Manager for Visual Studio or the NuGet window for JetBrains Rider, then search for Twilio.AspNet.Core and install the package.
Twilio.AspNet.Mvc
Requirements
Requires .NET 4.6.2 or later.
Installation
From the Package Manager Console or Developer PowerShell, run the following command to install the latest version:
Install-Package Twilio.AspNet.Mvc
Alternatively, use the NuGet Package Manager for Visual Studio or the NuGet window for JetBrains Rider, then search for Twilio.AspNet.Mvc and install the package.
Code Samples for either Library
Incoming SMS
using Twilio.AspNet.Common;
using Twilio.AspNet.Core; // or .Mvc for .NET Framework
using Twilio.TwiML;
public class SmsController : TwilioController
{
// GET: Sms
public TwiMLResult Index(SmsRequest request)
{
var response = new MessagingResponse();
response.Message($"Ahoy {request.From}!");
return TwiML(response);
}
}
This controller will handle the SMS webhook. The details of the incoming SMS will be bound to the SmsRequest request
parameter.
By inheriting from the TwilioController
, you get access to the TwiML
method which you can use to respond with TwiML.
Incoming Voice Call
using Twilio.AspNet.Common;
using Twilio.AspNet.Core; // or .Mvc for .NET Framework
using Twilio.TwiML;
public class VoiceController : TwilioController
{
// GET: Voice
public TwiMLResult Index(VoiceRequest request)
{
var response = new VoiceResponse();
response.Say($"Ahoy! Are you from {request.FromCity}?");
return TwiML(response);
}
}
This controller will handle the Voice webhook. The details of the incoming voice call will be bound to the VoiceRequest request
parameter.
By inheriting from the TwilioController
, you get access to the TwiML
method which you can use to respond with TwiML.
Using TwiML
extension methods instead of inheriting from TwilioController
If you can't inherit from the TwilioController
class, you can use the TwiML
extension methods.
using Microsoft.AspNetCore.Mvc; // or System.Web.Mvc for .NET Framework
using Twilio.AspNet.Common;
using Twilio.AspNet.Core; // or .Mvc for .NET Framework
using Twilio.TwiML;
public class SmsController : Controller
{
// GET: Sms
public TwiMLResult Index(SmsRequest request)
{
var response = new MessagingResponse();
response.Message($"Ahoy {request.From}!");
return this.TwiML(response);
}
}
This sample is the same as the previous SMS webhook sample, but instead of inheriting from TwilioController
, the SmsController
inherits from the ASP.NET MVC provided Controller
, and uses this.TwiML
to use the TwiML
extension method.
Minimal API
Twilio.AspNet.Core also has support for Minimal APIs.
This sample shows you how you can hande an SMS webhook using HTTP GET and POST.
using Microsoft.AspNetCore.Mvc;
using Twilio.AspNet.Core.MinimalApi;
using Twilio.TwiML;
var builder = WebApplication.CreateBuilder(args);
var app = builder.Build();
app.MapGet("/sms", ([FromQuery] string from) =>
{
var response = new MessagingResponse();
response.Message($"Ahoy {from}!");
return Results.Extensions.TwiML(response);
});
app.MapPost("/sms", async (HttpRequest request) =>
{
var form = await request.ReadFormAsync();
var from = form["from"];
response.Message($"Ahoy {from}!");
return Results.Extensions.TwiML(response);
});
app.Run();
In traditional MVC controllers, the SmsRequest
, VoiceRequest
, and other typed request object would be bound, but Minimal APIs does not support the same model binding.
Instead, you can bind individual parameters for HTTP GET requests using the FromQuery
attribute. When you don't specify the FromQuery attribute, multiple sources will be considered to bind from in addition to the query string parameters. For HTTP POST requests you can grab the form and then retrieve individual parameters by string index.
To respond with TwiML, use the Results.Extensions.TwiML
method.
Model Bind webhook requests to typed .NET objects
Twilio.AspNet comes with multiple classes to help you bind the data from webhooks to strongly typed .NET objects. Here's the list of classes:
SmsRequest
: Holds data for incoming SMS webhook requestsSmsStatusCallbackRequest
: Holds data for tracking the delivery status of an outbound Twilio SMS or MMSStatusCallbackRequest
: Holds data for tracking the status of an outbound Twilio Voice CallVoiceRequest
: Holds data for incoming Voice Calls
Note Only MVC Controllers and Razor Pages support model binding to typed .NET objects. In Minimal APIs and other scenarios, you'll have to write code to extract the parameters yourself.
The following sample shows how to accept inbound SMS, respond, and track the status of the SMS response.
using Twilio.AspNet.Common;
using Twilio.AspNet.Core; // or .Mvc for .NET Framework
using Twilio.TwiML;
public class SmsController : TwilioController
{
private readonly ILogger<SmsController> logger;
public SmsController(ILogger<SmsController> logger)
{
this.logger = logger;
}
public TwiMLResult Index(SmsRequest request)
{
var messagingResponse = new MessagingResponse();
messagingResponse.Message(
body: $"Ahoy {request.From}!",
action: new Uri("/Sms/StatusCallback"),
method: Twilio.Http.HttpMethod.Post
);
return TwiML(messagingResponse);
}
public void StatusCallback(SmsStatusCallbackRequest request)
{
logger.LogInformation("SMS Status: {Status}", request.MessageStatus);
}
}
As shown in the sample above, you can add an SmsRequest
as a parameter, and MVC will bind the object for you.
The code then responds with an SMS with the status
and method
parameter. When the status of the SMS changes, Twilio will send an HTTP POST request to StatusCallback
action. You can add an SmsStatusCallbackRequest
as a parameter, and MVC will bind the object for you.
Add the Twilio client to the ASP.NET Core dependency injection container
In ASP.NET Core, you can add the Twilio REST API client to ASP.NET Core's services using the .AddTwilioClient
method, like this:
using Twilio.AspNet.Core;
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddTwilioClient()
Now you can request ITwilioRestClient
and TwilioRestClient
via dependency injection.
You can configure the Twilio client using the following configuration:
{
"Twilio": {
"AuthToken": "[YOUR_AUTH_TOKEN]",
"Client": {
"AccountSid": "[YOUR_ACCOUNT_SID]",
"AuthToken": "[YOUR_AUTH_TOKEN]",
"ApiKeySid": "[YOUR_API_KEY_SID]",
"ApiKeySecret": "[YOUR_API_KEY_SECRET]",
"CredentialType": "[Unspecified|AuthToken|ApiKey]",
"Region": null,
"Edge": null,
"LogLevel": null
}
}
}
A couple of notes:
Twilio:Client:AuthToken
falls back onTwilio:AuthToken
. You only need to configure one of them.Twilio:Client:CredentialType
has the following valid values:Unspecified
,AuthToken
, orApiKey
.Twilio:Client:CredentialType
is optional and defaults toUnspecified
. IfUnspecified
, whether you configured an API key or an Auth Token will be detected.
If you do not wish to configure the Twilio client using .NET configuration, you can do so manually:
using Twilio.AspNet.Core;
var builder = WebApplication.CreateBuilder(args);
builder.Services
.AddTwilioClient((serviceProvider, options) =>
{
options.AccountSid = "[YOUR_ACCOUNT_SID]";
options.AuthToken = "[YOUR_AUTH_TOKEN]";
options.ApiKeySid = "[YOUR_API_KEY_SID]";
options.ApiKeySecret = "[YOUR_API_KEY_SECRET]";
options.Edge = null;
options.Region = null;
options.LogLevel = null;
options.CredentialType = CredentialType.Unspecified;
});
Warning Do not hard-code your Auth Token or API key secret into code and do not check them into source control. We recommend using the Secrets Manager for local development. Alternatively, you can use environment variables, a vault service, or other more secure techniques.
Customize the HTTP client
By default when you call .AddTwilioClient
, an HTTP client factory is configured that is used to provide an HttpClient
to the Twilio REST client.
If you'd like to customize this HTTP client, you can do so by overriding the "Twilio" HTTP client factory, after invoking .AddTwilioClient
:
builder.Services.AddTwilioClient();
builder.Services.AddHttpClient("Twilio")
.ConfigureHttpClient(client =>
{
client.BaseAddress = new Uri("YOUR_PROXY_ADDRESS");
})
.ConfigurePrimaryHttpMessageHandler(() => new HttpClientHandler
{
// same options as the Twilio C# SDK
AllowAutoRedirect = false
});
Validate Twilio HTTP requests
Webhooks require your endpoint to be publicly available, but this also introduces the risk that bad actors could find your webhook URL and try to abuse it.
Luckily, you can verify that an HTTP request originated from Twilio.
The Twilio.AspNet
library provides an attribute that will validate the request for you in MVC.
The implementation differs between the Twilio.AspNet.Core
and Twilio.AspNet.Mvc
library.
Validate requests in ASP.NET Core
Add the .AddTwilioRequestValidation
method at startup:
using Twilio.AspNet.Core;
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddTwilioRequestValidation();
Then configure the request validation:
{
"Twilio": {
"AuthToken": "[YOUR_AUTH_TOKEN]",
"RequestValidation": {
"AuthToken": "[YOUR_AUTH_TOKEN]",
"AllowLocal": false,
"BaseUrlOverride": "https://??????.ngrok.io"
}
}
}
A couple of notes about the configuration:
Twilio:RequestValidation:AuthToken
falls back onTwilio:AuthToken
. You only need to configure one of them.AllowLocal
will skip validation when the HTTP request originated from localhost. ⚠️ Only use this during development, as this will make your application vulnerable to Server-Side Request Forgery.- Use
BaseUrlOverride
in case your app is behind a reverse proxy or a tunnel like ngrok. The path of the current request will be appended to theBaseUrlOverride
for request validation.
Info Instead of configuring the
BaseUrlOverride
, you can use the forwarded headers middleware to set the correct scheme, port, host, etc. on the current HTTP request.
using Microsoft.AspNetCore.HttpOverrides;
using Twilio.AspNet.Core;
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddTwilioRequestValidation();
builder.Services.Configure<ForwardedHeadersOptions>(options => options.ForwardedHeaders = ForwardedHeaders.All);
// more service configuration
var app = builder.Build();
app.UseForwardedHeaders();
// more request pipeline configuration
app.Run();
As a result, you don't have to configure BaseUrlOverride
whenever you restart ngrok, or change reverse proxy URLs. Follow Microsoft's guidance to configure the forwarded header middleware securely.
You can also manually configure the request validation:
using Twilio.AspNet.Core;
var builder = WebApplication.CreateBuilder(args);
builder.Services
.AddTwilioRequestValidation((serviceProvider, options) =>
{
options.AuthToken = "[YOUR_AUTH_TOKEN]";
options.AllowLocal = false;
options.BaseUrlOverride = "https://??????.ngrok.io";
});
Warning Do not hard-code your Auth Token into code and do not check them into source control. We recommend using the Secrets Manager for local development. Alternatively, you can use environment variables, a vault service, or other more secure techniques.
ASP.NET Core MVC
Once request validation has been configured, you can use the [ValidateRequest]
attribute in MVC.
You can apply the attribute globally, to MVC areas, controllers, and actions.
Here's an example where the attribute is applied to the Index
action:
using Twilio.AspNet.Common;
using Twilio.AspNet.Core;
using Twilio.TwiML;
public class SmsController : TwilioController
{
[ValidateRequest]
public TwiMLResult Index(SmsRequest request)
{
var response = new MessagingResponse();
response.Message("Ahoy!");
return TwiML(response);
}
}
ASP.NET Core Endpoints & Minimal APIs
.NET 7 introduces the concept of endpoint filters which you can apply to any ASP.NET Core endpoint.
The helper library for ASP.NET Core added an endpoint filter to validate Twilio requests called ValidateTwilioRequestFilter
.
You can add this filter to any endpoint or endpoint group using the ValidateTwilioRequest
method:
// add filter to endpoint
app.MapPost("/sms", () => ...)
.ValidateTwilioRequest();
// add filter to endpoint group
var twilioGroup = app.MapGroup("/twilio");
twilioGroup.ValidateTwilioRequest();
twilioGroup.MapPost("/sms", () => ...);
twilioGroup.MapPost("/voice", () => ...);
Alternatively, you can add the endpoint filter yourself:
app.MapPost("/sms", () => ...)
.AddEndpointFilter<ValidateTwilioRequestFilter>();
ASP.NET Core Middleware
When you can't use the [ValidateRequest]
filter or ValidateTwilioRequestFilter
, you can use the ValidateTwilioRequestMiddleware
instead.
You can add add the ValidateTwilioRequestFilter
like this:
app.UseTwilioRequestValidation();
// or the equivalent: app.UseMiddleware<ValidateTwilioRequestMiddleware>();
This middleware will perform the validation for all requests.
If you don't want to apply the validation to all requests, you can use app.UseWhen()
to run the middleware conditionally.
Here's an example of how to validate requests that start with path /twilio-media, as to protect media files that only the Twilio Proxy should be able to access:
using System.Net;
using Microsoft.Extensions.FileProviders;
using Microsoft.Extensions.Options;
using Twilio.AspNet.Core;
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddTwilioRequestValidation();
var app = builder.Build();
app.UseWhen(
context => context.Request.Path.StartsWithSegments("/twilio-media", StringComparison.OrdinalIgnoreCase),
app => app.UseTwilioRequestValidation()
);
app.UseStaticFiles(new StaticFileOptions
{
FileProvider = new PhysicalFileProvider(Path.Combine(builder.Environment.ContentRootPath, "TwilioMedia")),
RequestPath = "/twilio-media"
});
app.Run();
Validate requests in ASP.NET MVC on .NET Framework
In your Web.config you can configure request validation like shown below:
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<configSections>
<sectionGroup name="twilio" type="Twilio.AspNet.Mvc.TwilioSectionGroup,Twilio.AspNet.Mvc">
<section name="requestValidation" type="Twilio.AspNet.Mvc.RequestValidationConfigurationSection,Twilio.AspNet.Mvc"/>
</sectionGroup>
</configSections>
<twilio>
<requestValidation
authToken="[YOUR_AUTH_TOKEN]"
baseUrlOverride="https://??????.ngrok.io"
allowLocal="false"
/>
</twilio>
</configuration>
You can also configure request validation using app settings:
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<appSettings>
<add key="twilio:requestValidation:authToken" value="[YOUR_AUTH_TOKEN]"/>
<add key="twilio:requestValidation:baseUrlOverride" value="https://??????.ngrok.io"/>
<add key="twilio:requestValidation:allowLocal" value="false"/>
</appSettings>
</configuration>
If you configure request validation using both ways, app setting will overwrite the twilio/requestValidation
configuration element.
A couple of notes about the configuration:
allowLocal
will skip validation when the HTTP request originated from localhost. ⚠️ Only use this during development, as this will make your application vulnerable to Server-Side Request Forgery.- Use
baseUrlOverride
in case you are in front of a reverse proxy or a tunnel like ngrok. The path of the current request will be appended to thebaseUrlOverride
for request validation.
Warning Do not hard-code your Auth Token into code and do not check them into source control. Use the
UserSecretsConfigBuilder
for local development or one of the other configuration builders. Alternatively, you should encrypt the configuration sections containing secrets like the Auth Token.
Now that request validation has been configured, use the [ValidateRequest]
attribute.
You can apply the attribute globally, to MVC areas, controllers, and actions.
Here's an example where the attribute is applied to the Index
action:
using Twilio.AspNet.Common;
using Twilio.AspNet.Mvc;
using Twilio.TwiML;
public class SmsController : TwilioController
{
[ValidateRequest]
public TwiMLResult Index(SmsRequest request)
{
var response = new MessagingResponse();
response.Message("Ahoy!");
return TwiML(response);
}
}
Validate requests using the RequestValidationHelper
The [ValidateRequest]
attribute only works for MVC. If you need to validate requests outside of MVC, you can use the RequestValidationHelper
class provided by Twilio.AspNet
.
Alternatively, the RequestValidator
class from the Twilio SDK can also help you with this.
Here's a Minimal API example that validates the incoming request originated from Twilio:
using System.Net;
using Microsoft.Extensions.Options;
using Twilio.AspNet.Core;
using Twilio.AspNet.Core.MinimalApi;
using Twilio.TwiML;
var builder = WebApplication.CreateBuilder(args);
// adds TwilioRequestValidationOptions
builder.Services.AddTwilioRequestValidation();
var app = builder.Build();
app.MapPost("/sms", (HttpContext httpContext) =>
{
if (IsValidTwilioRequest(httpContext) == false)
return Results.StatusCode((int) HttpStatusCode.Forbidden);
var messagingResponse = new MessagingResponse();
messagingResponse.Message("Ahoy!");
return Results.Extensions.TwiML(messagingResponse);
});
app.Run();
bool IsValidTwilioRequest(HttpContext httpContext)
{
var options = httpContext.RequestServices
.GetService<IOptions<TwilioRequestValidationOptions>>()
?.Value ?? throw new Exception("TwilioRequestValidationOptions missing.");
string? urlOverride = null;
if (options.BaseUrlOverride is not null)
{
var request = httpContext.Request;
urlOverride = $"{options.BaseUrlOverride.TrimEnd('/')}{request.Path}{request.QueryString}";
}
return RequestValidationHelper.IsValidRequest(httpContext, options.AuthToken, urlOverride, options.AllowLocal);
}
AddTwilioRequestValidation
adds the TwilioRequestValidationOptions
, which is normally used for the [ValidateRequest]
attribute,
but in this sample it is used to retrieve the request validation configuration yourself.
Then inside of the /sms endpoint, the IsValidTwilioRequest
method is used to validate the request.
IsValidTwilioRequest
retrieves the request validation options from DI and performs the same logic as [ValidateRequest]
would do for MVC requests.
If the request is not valid, HTTP Status Code 403 is returned, otherwise, some TwiML is returned to Twilio.
Product | Versions Compatible and additional computed target framework versions. |
---|---|
.NET Framework | net462 is compatible. net463 was computed. net47 was computed. net471 was computed. net472 was computed. net48 was computed. net481 was computed. |
-
.NETFramework 4.6.2
- Microsoft.AspNet.Mvc (>= 5.3.0)
- Twilio (>= 7.8.0)
- Twilio.AspNet.Common (>= 8.1.1)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories (2)
Showing the top 2 popular GitHub repositories that depend on Twilio.AspNet.Mvc:
Repository | Stars |
---|---|
ONLYOFFICE/CommunityServer
Free open source office suite with business productivity tools: document and project management, CRM, mail aggregator.
|
|
shr670377723/CommunityServer-master
|
Version | Downloads | Last updated | |
---|---|---|---|
8.1.1 | 58 | 12/6/2024 | |
8.1.0 | 65 | 12/5/2024 | |
8.0.2 | 78,072 | 5/11/2023 | |
8.0.1 | 1,339 | 5/2/2023 | |
8.0.1-rc | 711 | 4/21/2023 | |
8.0.0 | 15,550 | 3/2/2023 | |
7.0.0 | 23,425 | 11/18/2022 | |
7.0.0-rc | 731 | 11/17/2022 | |
6.0.0 | 53,438 | 8/5/2022 | |
6.0.0-alpha2 | 722 | 8/4/2022 | |
6.0.0-alpha | 723 | 7/20/2022 | |
5.77.0 | 10,345 | 7/19/2022 | |
5.73.0 | 100,415 | 4/5/2022 | |
5.71.0 | 20,992 | 2/24/2022 | |
5.68.3 | 113,351 | 11/24/2021 | |
5.37.2 | 210,632 | 11/6/2020 | |
5.33.1 | 427,772 | 10/16/2019 | |
5.20.1 | 606,201 | 10/26/2018 | |
5.9.7 | 240,731 | 3/2/2018 | |
5.9.6 | 8,964 | 2/12/2018 | |
5.8.3 | 66,746 | 11/9/2017 | |
5.8.1 | 12,457 | 10/31/2017 | |
5.0.2 | 76,142 | 6/7/2017 | |
5.0.1 | 55,456 | 2/22/2017 |
Refer to the changelog at https://github.com/twilio-labs/twilio-aspnet/blob/main/CHANGELOG.md