Skip to content

Update app-secrets.md #33962

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Rick-Anderson merged 10 commits into from
Oct 28, 2024
Merged

Update app-secrets.md #33962

Changes from 5 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
7ba55b1
Update app-secrets.md
Rick-Anderson Oct 28, 2024
925913c
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
35871f1
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
9f0dca5
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
47f0ff1
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
8abe3f8
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
efced12
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
eec6fd5
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
e48d44e
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
72f0587
Update aspnetcore/security/app-secrets.md
Rick-Anderson Oct 28, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion aspnetcore/security/app-secrets.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,9 @@ By [Rick Anderson](https://twitter.com/RickAndMSFT) and [Kirk Larkin](https://tw

[View or download sample code](https://github.com/dotnet/AspNetCore.Docs/tree/main/aspnetcore/security/app-secrets/samples) ([how to download](xref:index#how-to-download-a-sample))

This document explains how to manage sensitive data for an ASP.NET Core app on a development machine. Never store passwords or other sensitive data in source code. Production secrets shouldn't be used for development or test. Secrets shouldn't be deployed with the app. Instead, production secrets should be accessed through a controlled means like environment variables or Azure Key Vault. You can store and protect Azure test and production secrets with the [Azure Key Vault configuration provider](xref:security/key-vault-configuration).
This document explains how to manage sensitive data for an ASP.NET Core app on a development machine. Never store passwords or other sensitive data in source code or configuration files. Production secrets shouldn't be used for development or test. Secrets shouldn't be deployed with the app. Production secrets should be accessed through a controlled means like Azure Key Vault. Azure test and production secrets can be stored and protected with the [Azure Key Vault configuration provider](xref:security/key-vault-configuration).

[!INCLUDE [managed-identities-test-non-production](~/includes/managed-identities-test-non-production.md)]
Copy link
Contributor

@tdykstra tdykstra Oct 28, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This include file isn't a perfect fit here. It begins "This article uses a local database that doesn't require the user to be authenticated." That was written for a tutorial. This article uses a few database examples, including one that does require authentication. Consider using revised include file text in a variant of the include file: "Some of the connection strings shown in this article are for local databases that don't require the user to be authenticated."


To use user secrets in a .NET console app, see [this GitHub issue](https://github.com/dotnet/EntityFramework.Docs/issues/3939#issuecomment-1191978026).

Expand Down
Loading