asp.net 内核中 web.config 文件的替代品是什么

Question

I am started working on asp.net core web application and there is no web.config file in this project. Here is appsettings.json file though. I don't know where to store confidential information (like we store username and passwords of domain in web.config file in.Net Framework). Is it safe to Store confidential data in appsettins.json file?

Answer 1

Yes appsettings.json is like web.config for ASP.NET Core. It's for storing non secretive data. But there are multiple ways to configure your app, eg environment variables, command line arguments, as well as appsettings.json. You can also configure each environment with this file.

You should not store secrets like usernames, passwords or API keys here, as this file gets checked into source control and you might leak these to other parties. You can use User Secrets (only in development) or Azure Key Vault for secretive settings.

This is a big topic so it's better to check the docs on this, and see which provider(s) works best for your scenario.