0 reputation · 1h ago
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Accepted answer · chosen by the author
0 reputation · 1h ago
Use configuration providers with explicit precedence and retrieve production secrets from a secure runtime source. User Secrets are intended for development, not production storage. Never trust browser-supplied roles; authorization policies must evaluate the authenticated server-side identity.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
dotnetcore