No video
SECRET MANAGER In ASP NET Core | Getting Started With ASP.NET Core Series
Рет қаралды 12,453
Күн бұрынHey Friends, Most applications that we build these days rely on secrets to perform certain operations. These secrets could include API keys, database credentials, third-party service credentials, etc.
In ASP.NET projects application secrets are often stored within configuration files such as web.config or appsettings.json. However one of the first recommendations of secure coding practices is to Never store passwords or other sensitive data as part of the source code.
So how do you solve this problem of not having sensitive information in your configuration file, but still have a seamless local development experience when developing ASP NET Applications.
🔗Source rahulpnath.vis...
🔗Secret Manager - docs.microsoft...
Additional Watching
📹SPA TEMPLATE - • SINGLE PAGE APPLICATIO...
📹CONFIGURATION - • CONFIGURATION in ASP.N...
📹HTTP CLIENT - • How To Use HTTP CLIENT...
📹OPTIONS PATTERN - • OPTIONS PATTERN in ASP...
📹ASP NET Core Series - • ASP.NET Core
Come say hi! ✋
🌍 Blog - rahulpnath.com/
✉ Subscribe to my Newsletter - www.rahulpnath...
🐦Twitter - / rahulpnath
📸Instagram - / rahulpnath
🎥 Recording Setup and Workflow - www.rahulpnath...
Video Edited by my wife, Parvathy 😍
Make sure to SUBSCRIBE to the channel. THANK YOU for helping me grow this channel !!
@onlinemsr 2 жыл бұрын
Secret Manager - Very well explained
@RahulNath 2 жыл бұрын
Thank you Raja. This article might interest you too www.rahulpnath.com/blog/handling-application-configuration/
@bhavyashah8847 3 жыл бұрын
This is so helpful. Thank you Rahul. I learn so many new things from your videos. I will make sure I share your channel with my team members. Cheers!
@RahulNath 3 жыл бұрын
Thank ou Bhavya! Happy that these are helpful 😀
@balagurunathanmarimuthu2807 4 ай бұрын
Well explained @Rahul. Keep doing the content like this and stay awesome!
@RahulNath 4 ай бұрын
Thank you Balagurunathan!
@re.tangle 2 жыл бұрын
Very concise video, if only every tutorial was like this. Great job, thank you for your work!
@RahulNath 2 жыл бұрын
Glad it was helpful! Do check the full series bit.ly/asp-net-core-series
@AndrewBrown-nw9nz 2 жыл бұрын
Very well explained -- I wish the official documentation & development books I often consult were as concise as this. Thank you.
@RahulNath 2 жыл бұрын
Glad it was helpful Andrew! Do check out the full series in case you haven't already bit.ly/asp-net-core-series. Do let me know your comments in case you get a chance to!
@rainron2664 3 жыл бұрын
My idol is back.. thanks a lot master for all of your kind sharing.. God bless you more.. 😊☝️
@RahulNath 3 жыл бұрын
Wow! So nice of you Rain. Thank you and glad you are liking it. 😀
@brianbaldos 2 жыл бұрын
Well explained. Thanks a lot!
@RahulNath 2 жыл бұрын
Glad it was helpful Brian. Hope you are enjoying the series bit.ly/asp-net-core-series
@panirajn 3 жыл бұрын
One more gem of an info you dropped ! thanks
@RahulNath 3 жыл бұрын
So I am guessing you like my other videos in this series too 😀 Thank you Paniraj for letting me know
@ajaypanse4489 6 ай бұрын
Hi Rahul, Your videos are very helpful to learn the concepts. Good wishes to you. Need to understand, do we need to have separate project of secret manager? Also can we we use same secret manager project to store secrets of multiple applications? Please explain
@shivamupadhyay6196 2 жыл бұрын
Thank You so much, Rahul!
@RahulNath 2 жыл бұрын
Glad you liked it Shivam! Do check out the full series if you haven't already bit.ly/asp-net-core-series
@anujadi8366 2 жыл бұрын
Great explanation as always sorry i couldn't find the tutorial project linked I just wanted to try out like shown in the video Thank you
@RahulNath 2 жыл бұрын
Sorry missed it in the description - Here it is rahulpnath.visualstudio.com/DefaultCollection/KZfaq%20Samples/_git/SecretManager
@mayureshs80 3 жыл бұрын
Thanks ! Can you also make a video for secrets from Azure vault?
@RahulNath 3 жыл бұрын
Here it is - kzfaq.info/get/bejne/bNKPntOqzLWUeZc.html You might want to also check my Key Vault Playlist kzfaq.info/sun/PL59L9XrzUa-nEwFPxQRu8jV94uM00pN0i Let know if that is what you were after.
@tarekjrd75 2 жыл бұрын
Hi rahul. Thank you for your efforts. I have a question: " how to specify the secrets in a production environment ? " Like supposing i m gonna launch my server app in a hosting service ? How should i manage my secrets in that env ? Or there is no difference?
@RahulNath 2 жыл бұрын
Secrets manager is for local development machine. For your production environment based on the application type there are different approaches. I list them out here in this blog post and an associated video www.rahulpnath.com/blog/handling-application-configuration/ Let me know if that helps you or if you have additional questions.
@akhilm4867 3 жыл бұрын
Please do a video about authentication and authorisation including jwt authentication
@RahulNath 3 жыл бұрын
Sure Akhil, will do. I am working on it currently. It will be out soon.😀
@nathanpowell4256 2 жыл бұрын
Thanks for the great explanation. The official documentation and videos from Microsoft that try explain these concepts are absolute garbage compared to your video.
@RahulNath 2 жыл бұрын
Glad this was helpful Nathan. I got most of the content for this video from the official documentation, but put in my on touch of organizing it differently. Extremely happy to hear that it helped. Do checkout the full series here bit.ly/asp-net-core-series. I am sure you will like it. Do let me know in case you get to watch any of them.
@nathanpowell4256 2 жыл бұрын
@@RahulNath Thanks for the link. I'll be sure to check them out.
@MrACody 7 ай бұрын
Can I add condition for production in startup like u added for locl env and use secret manager for production instead of azure valut if I will delooyed in my private servsr
@lavanyaece 2 жыл бұрын
how to set up secret. json values on web server when we deploy to the test server?
@RahulNath 2 жыл бұрын
You shouldn’t - Secret manager is for use on local development machine. Check out this blog post and associated videos on how to do it on server - www.rahulpnath.com/blog/handling-application-configuration/ Let me know if you have additional questions
@MrSachintelalwar 2 жыл бұрын
Very well explained. How would this work if I have to use localstack for local development? Would I initialize the DBContext with some condition?
@RahulNath 2 жыл бұрын
Thank you Sachin. You can have the connection details to local stack updated in your config file. If the values are publicly available as part of the localstack docs, I would leave that in appsettings.Development.json file, so that your entire dev team has it there by default. Does that answer your question?
@MrSachintelalwar 2 жыл бұрын
@@RahulNath Perfect. Yes, it does answer my question. Thank you for the quick response. Appreciate it :)
@RahulNath 2 жыл бұрын
@@MrSachintelalwar Great - Thank you!
@sarathbaiju6040 2 жыл бұрын
Hi Rahul, is it safe to add this feature to azure function application? When i try to add secret manager file to a existing azure function, it add some other packages moreover, the .csproj file get updated.
@RahulNath 2 жыл бұрын
Yes it’s fine to use in local development environments. I show this in my Azure Functions video kzfaq.info/get/bejne/aJ1_iLeHybGWj2Q.html . There is also an associated DI for Functions video if you are interested. The additional dll is to support integrating the Secret Manager. Let me know if you have additional questions.
@muhammadahsansaifi5182 Жыл бұрын
Hello Raul Good work can you share the source code of whole series thank you
@RahulNath Жыл бұрын
Thank you - Source code links are in the description for each video. Let me know in case I missed for any.
@payalkumari5958 3 жыл бұрын
Hi rahul
@RahulNath 3 жыл бұрын
Hi Payal
@mahesh_rcb 2 жыл бұрын
Is is possible to set connection string as user secret from command line when publishing .net core app .. For development one connection string For production one connection string. And how to get that CLI of yours it's cool btw 😀
@RahulNath 2 жыл бұрын
For terminal I use the Windows Terminal. More details here www.rahulpnath.com/blog/setting-up-windows-terminal/ Not sure if I understand the first question Mahesh. Can you provide some more details? I did a more recent video on different ways you can set environment specific configuration values. Do check out if that answers your question kzfaq.info/get/bejne/rbqDqJWSqNW2Z40.html
@mahesh_rcb 2 жыл бұрын
@@RahulNath The new link is more clear now Thanks 👍🏻. Looking forward to more .net content 😀
@RahulNath 2 жыл бұрын
@@mahesh_rcb Nice 👍
@mersy4405 2 жыл бұрын
Hi Rahul, I have a question that hope you can reply me, I'm following your video and its works on local but when I deploy it to production mode it got an error "Amazon.Runtime.AmazonServiceException: Unable to get IAM security credentials from EC2 Instance Metadata Service.". So how can I get a credential for my production mode? Tks for your time
@RahulNath 2 жыл бұрын
For production you should not be using Secret Manager. Looks like you are using AWS, this post and associated video should help www.rahulpnath.com/blog/amazon-credentials-dotnet/ Please let me know if that helps or if you have additional questions.
@MarioLopez-eu8tj 3 жыл бұрын
Do you have a similar example regarding how to implement for production environment using the service keyword ?
@RahulNath 3 жыл бұрын
Sorry did not understand your question Mario. Can you give me some more details. In prod I would use something like Key Vault . You can check out the associated blog post and article here www.rahulpnath.com/blog/connect-net-core-to-azure-key-vault-in-ten-minutes/ Let know if that is what you are looking for or if you have additional questions.
@MarioLopez-eu8tj 3 жыл бұрын
@@RahulNath I meant key vault but i don't know if i can apply it to other project that aren't web type or if there are another alternatives rather than key vault to use.
@RahulNath 3 жыл бұрын
@@MarioLopez-eu8tj Sorry for the late reply. Yes you can use KeyVault from any .net application. It is not specific to web project. Let know if you are running into any specific issues and happy to help.
@angeldimitrov1353 2 жыл бұрын
@@RahulNath Any insight on how secrets could be managed for sensitive applications running in network-restricted environments, that may not be able to use services like Azure KeyVault? .NET Framework .config files could be configured to have sections that were encrypted with the RSA private key of the machine that was running the application, then .NET would figure out the decryption when the runtime would hit code that needed to access the configuration values. Any idea if .NET Core has an equivalent functionality?
@seegreen6484 2 жыл бұрын
Why aren't you using visual studio 😭
@RahulNath 2 жыл бұрын
Rider has functionality that enables to easily navigate into framework methods which I often use in these videos. Also I sometimes switch to visual studio (like at 9:03 in this video). Anything in particular you are finding it hard to follow when I use Rider?
@seegreen6484 2 жыл бұрын
@@RahulNath No lol I'm just stubborn and like Visual Studio because it's free. Ryders from the same creators of clion/intellij right?
@RahulNath 2 жыл бұрын
@@seegreen6484 Haha yeah - I started using Rider because I got a free license as part of Microsoft MVP program. But liking it now 😀
Rahul Nath
Рет қаралды 95 М.
Rahul Nath
Рет қаралды 46 М.
Family Games Media
Рет қаралды 31 МЛН
Rahul Nath
Рет қаралды 19 М.
Rahul Nath
Рет қаралды 20 М.
Rahul Nath
Рет қаралды 51 М.