Anak.Uk

Using Azure Key Vault to store connection strings – Xlinesoft Blog

Azure Key Vault provides secure storage for sensitive information such as passwords, secrets, etc. If you host your PHPRunner or ASPRunner.NET application in Azure, it makes sense to store your connection strings in Key Vault. In this article we will show you how this can be done.

Creating Key Vault in Azure

1. Create an application in Azure. Note the tenantId, clientId, and clientSecret values.

2. Sign in to Azure and create a subscription. You must specify a subscription name and select a billing account.

More information:

3. Go back to the start of the portal and go to Key Vaults. Click “Create”. Select a subscription, select a resource group (or create a new one). Enter the name of the Key Vault.

4. Now it’s time to assign access permissions. In the keybox you just created, go to “Access Control (IAM)”. Add -> Add Role Assignment, select “Vault Key Certificate Officer” using the search option, click “Next”. Select “User, Group, or Service Principal”

Click “Select Members” find your app name and select it. . Search for your app (not the user) in the search bar on the right. Then review + assign.

Permissions can take a while to apply, but in our situation it worked immediately.

5. Create a secret. The secret is the actual object that stores the sensitive information, the database password in our case. Select your Key Vault and in Objects -> Secrets -> Generate/Import enter the name of the secret (“pass” in our case) and its value.

Now we are ready to use this in our code.

Using Key Vault in PHPRunner

1. In Style Editor -> Custom Files add a new file called keyvault.php. Paste the code below and use your own tenantId, clientId, and clientSecret values.


<?php function getSecret($secretName){
	$tenantId = '...';
	$clientId = '...'; 
	$clientSecret="...";
	$vaultUrl = "https://xkvault.vault.azure.net/";

	$url = "https://login.microsoftonline.com/".$tenantId."/oauth2/token";
	$parameters = array(
		'grant_type' =?> 'client_credentials',
		'client_id' => $clientId,
		'client_secret' => $clientSecret,
		'resource' => '
	);
	$headers = array("Content-Type"=>"application/x-www-form-urlencoded");
	$response = runner_post_request($url, $parameters, $headers);

	$json = runner_json_decode($response["content"]);
	if (!isset($json['access_token'])) {
		throw new Exception("Failed to get access token: " . $response);
	}
	$accessToken = $json['access_token'];

	$url = $vaultUrl . "secrets/".$secretName."?api-version=7.3";

	$headers = array(
		"Authorization"=>"Bearer ".$accessToken,
		"Content-Type"=>"application/json"
	);
	$response = runner_http_request($url, "", "GET", $headers);
	$result = runner_json_decode($response["content"]);
	return $result['value'];
}
?>

2. An example of using Key Vault in your application. We will create a new server database connection and retrieve the password from the Key Vault database. In this example we use the MySQL database.


include("keyvault.php");
$host="localhost";
$user="root";
$pwd=getSecret("pass");
$port="";
$sys_dbname="cars";

Using Key Vault in ASPRunner.NET

1. In Style Editor -> Custom Files add a new file called keyvault.cs. Paste the code below and use your own tenantId, clientId, and clientSecret values.


using System;
using System.IO;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Web;
using System.Web.Mvc;
using System.Reflection;
using runnerDotNet;
namespace runnerDotNet
{
	public partial class CommonFunctions
	{
		public static XVar getSecret(dynamic secretName)
		{
			dynamic accessToken = null, clientId = null, clientSecret = null, headers = null, json = XVar.Array(), parameters = null, result = XVar.Array(), tenantId = null, url = null, var_response = XVar.Array(), vaultUrl = null;
			tenantId = new XVar("...");
			clientId = new XVar("...");
			clientSecret = new XVar("...");
			vaultUrl = new XVar("
			url = XVar.Clone(MVCFunctions.Concat(" tenantId, "/oauth2/token"));
			parameters = XVar.Clone(new XVar("grant_type", "client_credentials", "client_id", clientId, "client_secret", clientSecret, "resource", "
			headers = XVar.Clone(new XVar("Content-Type", "application/x-www-form-urlencoded"));
			var_response = XVar.Clone(MVCFunctions.runner_post_request((XVar)(url), (XVar)(parameters), (XVar)(headers)));
			json = XVar.Clone(CommonFunctions.runner_json_decode((XVar)(var_response["content"])));
			if(XVar.Pack(!(XVar)(json.KeyExists("access_token"))))
			{
				new Exception((XVar)(MVCFunctions.Concat("Failed to get access token: ", var_response)));
			}
			accessToken = XVar.Clone(json["access_token"]);
			url = XVar.Clone(MVCFunctions.Concat(vaultUrl, "secrets/", secretName, "?api-version=7.3"));
			headers = XVar.Clone(new XVar("Authorization", MVCFunctions.Concat("Bearer ", accessToken), "Content-Type", "application/json"));
			var_response = XVar.Clone(MVCFunctions.runner_http_request((XVar)(url), new XVar(""), new XVar("GET"), (XVar)(headers)));
			result = XVar.Clone(CommonFunctions.runner_json_decode((XVar)(var_response["content"])));
			return result["value"];
		}
	}
}

2. In the BeforeConnect event, use the following code:


dynamic pass = CommonFunctions.getSecret("pass");
GlobalVars.ConnectionStrings["conn"] = MVCFunctions.Concat("Server=localhost;Database=cars;User Id=root;Password=",pass);

Technology

Berita Olahraga

Lowongan Kerja

Berita Terkini

Berita Terbaru

Berita Teknologi

Seputar Teknologi

Berita Politik

Resep Masakan

Pendidikan

Azure, blog, connection, key, store, strings, Vault, Xlinesoft

Anak.Uk

Using Azure Key Vault to store connection strings – Xlinesoft Blog

Using Azure Key Vault to store connection strings – Xlinesoft Blog

Creating Key Vault in Azure

Using Key Vault in PHPRunner

Using Key Vault in ASPRunner.NET

Leave a Reply Cancel reply

About Us

Quick Links

Recent Posts

Contact Info

Using Azure Key Vault to store connection strings – Xlinesoft Blog

Using Azure Key Vault to store connection strings – Xlinesoft Blog

Creating Key Vault in Azure

Using Key Vault in PHPRunner

Using Key Vault in ASPRunner.NET

Leave a Reply Cancel reply

Related Post

KPIs to Measure eCommerce Loyalty Programs

MDB5 REACT V.4.2.0

Media buying: quality vs. ladder