ASP 에 대한 애플리케이션 기밀 정보를 저장하는 방법NET 핵심 프로젝트

This article is for you that is either completely new to ASP .NET Core or is currently storing your secrets in config files that you may or may not check in by mistake. Keep secrets separate, store them using the Secret management tool in dev mode, and look into services like Azure KeyVault for production.

~/.microsoft/usersecrets/<user_secrets_id>/secrets.json

%APPDATA%\Microsoft\UserSecrets\<user_secrets_id>\secrets.json

   dotnet new webapi -o api --no-https
   cd api

   dotnet user-secrets init

   Set UserSecretsId to '<secret-id>' for MSBuild project '/path/to/your/project/project.csproj'.

   <UserSecretsId>secret-id</UserSecretsId>

dotnet user-secrets list

No secrets configured for this application.

   dotnet user-secrets set "ApiKey" "12345"

   dotnet user-secrets list

   ApiKey = 12345

ProductsUrl
ProductsApiKey

   dotnet user-secrets set "Products:Url" "http://path/to/product/url"
   dotnet user-secrets set "Products:ApiKey" "123abc"

   Successfully saved Products:Url = http://path/to/product/url to the secret store.
   Successfully saved Products:ApiKey = 123abc to the secret store.

   Products:Url = http://path/to/product/url
   Products:ApiKey = 123abc
   ApiKey = 12345

   public Startup(IConfiguration configuration) {}

   public void ConfigureServices(IServiceCollection services)
   {
      ApiKey = Configuration["Products:Url"];
      Console.WriteLine(ApiKey);
      services.AddControllers();
   }

   dotnet build && dotnet run

   http://path/to/product/url

  namespace webapi_secret
  {
    public class AppConfiguration
    {
      public string ApiKey { get; set; }
      public Product Product { get; set; }
    }
  }

  var config = new AppConfiguration();
  config.ApiKey = Configuration["Products:Url"];
  services.AddSingleton<AppConfiguration>(config);

  using Microsoft.AspNetCore.Mvc;

  namespace webapi_secret.Controllers
  {
    [ApiController]
    [Route("[controller]")]
    public class ProductsController : ControllerBase
    {
      AppConfiguration _config;
      public ProductsController(AppConfiguration config)
      {
        this._config = config;
      }

      [HttpGet]
      public string Get()
      {
        return this._config.ApiKey;
      }
    }
  }

  [HttpGet]
  public string Get()
  {
    return this._config.ApiKey;
  }

dotnet build && dotnet run

   namespace webapi_secret
    {
      public class HttpService
      {
        private string _apiKey;
        public HttpService(string apiKey)
        {
          this._apiKey = apiKey;
        }

        public string ApiKey { get { return _apiKey; } }
      }
    }

   services.AddSingleton<HttpService>(new HttpService(Configuration["ApiKey"]));

Wait, what those keys we created Products::ApiKey, all that talk of a namespace?

   public class ProductConfiguration
   {
     public string Url { get; set; }
     public string ApiKey { get; set; }
   }

   var productConfig = Configuration.GetSection("Products")
                          .Get<ProductConfiguration>();
   services.AddSingleton<ProductConfiguration>(productConfig);

   using Microsoft.AspNetCore.Mvc;

    namespace webapi_secret.Controllers
    {
      [ApiController]
      [Route("[controller]")]
      public class ProductsController : ControllerBase 
      {
        AppConfiguration _config;
        ProductConfiguration _productConfig;
        public ProductsController(AppConfiguration config, ProductConfiguration productConfiguration)
        {
          this._config = config;
          this._productConfig = productConfiguration;
        }

        [HttpGet]
        public string Get()
        {
          // return this._config.ApiKey;
          return this._productConfig.ApiKey;
        }
      }
    }

dotnet user-secrets remove "ApiKey"

dotnet user-secret clear