如何保护关键数据 Blazor 服务器端

Question

i have my connectionstring stored in my appsetting.json in my blazor serverside app it make me no felling good when i know that my password is there in my code..

i know that in JAVA there is for exemple Glassfish who store critical data in Password Aliases, and not in the source code.

Is there something similar in .netcore? blazor serverside? Or a solution for store critical data?

Answer 1

You can use Secret Manager for local environment : https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-5.0&tabs=windows

For production you have many choices: Azure KeyVault, CI/CD pipelines configuration - variables substitution (Azure DevOps, Octopus Deploy, Github Actions, etc.), Environment variables, etc