- Logging via log4net provider and structured request logging middleware
- Caching pluggable: in-memory or Redis with batch controls
- Security via IdentityServer4, local API auth schemes, and policies
- HTTP pipeline uses HTTPS redirection, forwarded headers, static files, routing
- OpenAPI/Swagger served at the root path with ReDoc under
/Redoc
