Store Secret Data in .NET Core Web App with Azure Key Vault
What you'll learn
- You will learn to store sensitive data, such as passwords, in a secure manner. You will use .NET Core User Secrets, Azure Project Settings and Azure Key Vault in combination with Active Directory to achieve this.
Course content
- Preview01:52
- Preview01:45
Requirements
- Have completed at least one MVC 5 beginner course
- Have a good understanding of the C# language
Description
This is an exciting course that will teach you how to secure sensitive data, such as passwords and connection strings in a ASP.NET Core 1.1 Web API.
These are skills that you must master as a serious developer.
*** NEW CONTENT: The same course for ASP.NET Core 1.1 in Visual Studio 2017 has been added ***
In this course you will:
- Register for an Azure subscription
- Implement a .NET Core 1.1 Web API
- Store sensitive data with User Secret Manager (secrets.json), which stays on the developer machine and won't be propagated to a source code repository like GitHub or TFS when the code is checked in.
- Implement an Interface called ISecrets, which will be injected into the controller's constructor via Dependecy Injection. The values from the secrets.json file or the Azure App Settings can then be used from the controller.
- Add an Azure Key Vault, where secret values are stored, protected by Azure Active Directory security.
- Add an Azure Active Directory App Registration to secure the Key Vault. The Application Id and the App Registration secret key is used to access the Key Vault
- Read values from the Key Vault using the Application Id, secret key and the Key Vault's value endpoints
- Call the Web API in Azure using the Chrome application Postman and make sure that the secret Key Vault values are returned. Note that the secret values normally wouldn't be returned through the API, we do it here for educational purposes only.
Who this course is for:
- The ideal student for this course is a web developer that want to learn how to store sensitive data securely in web applications
- Have an open mind and be eager to learn
Instructor
Jonas started a company back in 1994 focusing on education in Microsoft Office and the Microsoft operating systems. While studying at the university in 1995, he wrote his first book about Widows 95 as well as a number of course materials.
In the year 2000, after working as a Microsoft Office developer consultant for a couple of years, he wrote his second book about Visual Basic 6.0.
Between 2000 and 2004 he worked as a Microsoft instructor with two of the largest educational companies in Sweden. First teaching Visual Basic 6.0, and when Visual Basic.NET and C# were released he started teaching these languages as well as the .NET Framework. Teaching classes on all levels for beginner to advanced developers.
From the year 2005, Jonas shifted his career towards consulting once again, working hands on with the languages and framework he taught.
Fore the past two years he has been teaching C#, SQL Server Programming, Entity Framework and MVC 5 to students at a vocational college.
Jonas wrote his third book C# programming aimed at beginners to intermediate developers in 2013 and in 2015 his fourth book C# for beginners - The Tactical Guide was published. Jonas has also produced a 24h+ video course called. In July 2016 his latest book ASP.NET MVC 5 - How to build a membership website will be released on Amazon which this video course is based on.