This is a fork of Curtis Badke's Secrets Demo that will be discussed during the meetup. Thank you to Curtis for presenting and DevFacto for supporting Edmonton .NET User Group.
This is a very quick and dirty demo of loading configuration for ASPNET Core app using Azure KeyVault. Prepared for my EDMUG talk on February 27, 2018.
This demo does handle some things that you may want to consider for actual production use such as:
- dynamically taking new values if vault secrets change (everything loads on app start)
- insecure memory considerations. secrets are loading a plain strings into the config dictionary. if an attacker could get a memory dump of the application then the secrets will be easily retrievable. if this is a consideration for your app then other mechanisms such as SecureString should be considered.