Building RESTful Web Services with .NET Core

Sensitive data

While you work with APIs, you have to store sensitive data: the API key, secret key, username, password, and so on. The following are a few recommendations for you to take into consideration while you’re working with this data in the ASP.NET Core application:

• You should separate the configuration files from code.
• You should avoid storing this data in plain text files.
• You can use a separate class file where you can store these data values in the form of constants.
• You should store confidential data in environment variables. For more information, refer to http://www.dowdandassociates.com/blog/content/howto-set-an-environment-variable-in-windows-command-line-and-registry/.
• You can also use a secret manager to store your confidential ...