|
Ok so I've registered my net core API and a client app with Azure AD, I now have lot's of keys and ids that I need to access my API from the client. All is working as expected. I can't help thinking I've created another problem. I need to put these keys somewhere accessible but secure. Any recommendations?
"We can't stop here - this is bat country" - Hunter S Thompson - RIP
|
|
|
|
|
Add a method to your API that retrieves them from your DB... 
"The only place where Success comes before Work is in the dictionary." Vidal Sassoon, 1928 - 2012
|
|
|
|
|
I should have known this would happen 
"We can't stop here - this is bat country" - Hunter S Thompson - RIP
|
|
|
|
|
To be serious - the probably only safe way is to do server-to-server call...
(what kind of application is it?)
"The only place where Success comes before Work is in the dictionary." Vidal Sassoon, 1928 - 2012
|
|
|
|
|
It's a net core API
"We can't stop here - this is bat country" - Hunter S Thompson - RIP
|
|
|
|
|
Send 'em to me - I'll keep 'em safe ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Ok 
"We can't stop here - this is bat country" - Hunter S Thompson - RIP
|
|
|
|
|
Post-it note on the monitor is traditional.
Software rusts. Simon Stephenson, ca 1994. So does this signature. me, 2012
|
|
|
|
|
Azure Key Vault?[^]
Using the .NET Core Configuration.Extensions.KeyVault (or something like that) package, you can import all your secrets into your app as if they were in your app.config file.
Pro-tip: For your local configuration with secrets that you do not want in source control or your key vault, use user secrets[^].
|
|
|
|
|
I was going to post that. I've used Key Vault years ago, and even without a wrapper to simplify things, I found it to be very straightforward to use (once you got past initial authentication, which you've obviously already figured out).
|
|
|
|
|
|
Docker / Kubernets Environment Variable via command line or secrets file. ( This require change in app as it needs to read that data from command line or secrets file. Welcome to world of microservices ! )
Config file
Database
Azure Vault
Zen and the art of software maintenance : rm -rf *
Maths is like love : a simple idea but it can get complicated.
|
|
|
|
|
If you're deploying the client to a Windows machine (as opposed to *nix), I'd use the Windows Credential Manager - that means you have to be able to get them out of there, but they are protected by DPAPI at least
|
|
|
|
|
Put them in Pastebin.com (in earlier days, I would have suggested Post It notes on your computer). Make it Public, so that they can be easily accessed, but, for security, don't tell anyone.
|
|
|
|
|
"Imitation is the sincerest form of flattery"?
Apparently, the police just call it "Forgery" ... 
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I suspect that you intended to include some sort of link in this posting.
|
|
|
|
|
Probably not while the cops are watching...
I have lived with several Zen masters - all of them were cats.
His last invention was an evil Lasagna. It didn't kill anyone, and it actually tasted pretty good.
|
|
|
|
|
I suspect you didn't get the joke 
|
|
|
|
|
|
"Imitation is the sincerest form of flattery"?
Apparently, the police just call it "Forgery" ...
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
I'm surprised it took two days for someone to think of that!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I only just went through the input - I mean really, that that's the ideal Burns and Allen line by the straight man (my apologies to LGPTQIA+ and the sheep).
Burns: Say goodnight, Gracy.
Allen: Goodnight, Gracy.
I'm generally "off line" on weekends and so you do get some relief.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
Dollar Tree had a $1 screen protector for phones.
Nice
Wrong size
Even though the size is off (by maybe 7 or 8 mm) it's a good thing and I'm using it.
The size is the only problem.
The Sprint Store will sell me one; perfect size.
I think theirs is $40 (Forty Dollars)
eBay and Amazon are putting them out there, generally in the range of 2-to-5 dollars.
If you know what you're talking about (in this case, I barely, if at all, know anything about this stuff) you can help a clueless newbee.
Guide me oh great nerds of the internet; you are the true source of knowledge on this earth.
Are these things on the internet as good as the $40 thing from Sprint ?
|
|
|
|
|
C-P-User-3 wrote: Are these things on the internet as good as the $40 thing from Sprint ?
Have you ever heard the phrase, "a fool and his money are soon parted"?
|
|
|
|
|
Let me put it this way: just before I went down with C-19, I bought some 2.8mm strimmer wire for my petrol strimmer. And I got to use it on Monday (it's a moped-on-a-stick, 52cc engine at one end and a strimmer head at the other, so it's heavy). And it was useless. Every couple of moments it would wind itself round the strimmer head an lock it solid, so I'd spend 10 minutes getting it out, fixing it, and starting again. After the third try, I threw all 50m in the bin and bought genuine Stihl wire (even though my strimmer isn't Stihl) from Amazon.
It arrived yesterday, so I loaded it up today and it worked perfectly for an hour or so.
Yes, it cost more. Yes, it looks the same. Yes, it has a nice reel with the Stihl logo on to hold it.
But ... it works. I learned once again that buying cheap can get expensive!
Cheap screens may not have oil resistant layers, are probably PETG which is prone to scratches and cracks.
I'd assume the phone wasn't cheap: so why put a cheap protector on? Maybe you don't need a $40 one, but you'd be relying on a $1-including-profit,-shipping,-cost-of-sales,-taxes,-... to protect probably the most important part ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
