Reputation: 195
i have my connectionstring stored in my appsetting.json in my blazor serverside app it make me no felling good when i know that my password is there in my code..
i know that in JAVA there is for exemple Glassfish who store critical data in Password Aliases, and not in the source code.
Is there something similar in .netcore? blazor serverside? Or a solution for store critical data ?
Upvotes: 1
Views: 288
Reputation: 5787
You can use Secret Manager for local environment: https://learn.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-5.0&tabs=windows
For production you have many choices: Azure KeyVault, CI/CD pipelines configuration - variables substitution (Azure DevOps, Octopus Deploy, Github Actions, etc.), Environment variables, etc
Upvotes: 2