eelke
07393f57fc
Added the use of DEK's for encryption of secrets. Both the KEK's and DEK's are stored in a way that you can have multiple key of which one is active. But the others are still available for decrypting. This allows for implementing key rotation. Co-authored-by: eelke <eelke@eelkeklein.nl> Co-authored-by: Eelke76 <31384324+Eelke76@users.noreply.github.com> Reviewed-on: #6
22 lines
No EOL
644 B
C#
22 lines
No EOL
644 B
C#
using IdentityShroud.Core.Contracts;
|
|
using Microsoft.Extensions.Configuration;
|
|
|
|
namespace IdentityShroud.Core.Security;
|
|
|
|
/// <summary>
|
|
/// Secret provider that retrieves secrets from configuration.
|
|
/// </summary>
|
|
public class ConfigurationSecretProvider(IConfiguration configuration) : ISecretProvider
|
|
{
|
|
private readonly IConfigurationSection secrets = configuration.GetSection("secrets");
|
|
|
|
public string GetSecret(string name)
|
|
{
|
|
return secrets.GetValue<string>(name) ?? "";
|
|
}
|
|
|
|
public KeyEncryptionKey[] GetKeys(string name)
|
|
{
|
|
return secrets.GetSection(name).Get<KeyEncryptionKey[]>() ?? [];
|
|
}
|
|
} |