How to keep password secure with Publish Profile?

  • Thread starter Thread starter acbaile
  • Start date Start date
A

acbaile

Guest
Hi! When i publish my ASP.NET Core application to Azure, i have to set connection string under "Apply this migration on publish". And i see that this connection string is kept in file ProjectName - Web Deploy.pubxml.user non-encrypted:

<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<PropertyGroup>
<EncryptedPassword>AQAAANCMnd8BFdERjH ... MsEA4lyWyC</EncryptedPassword>
</PropertyGroup>
<ItemGroup>
<EFMigrations Include="Emmi.Data.ApplicationDbContext">
<Value>Server=servername.database.windows.net%3bDatabase=db_name%3bUser Id=user_id%3bPassword=password</Value>
</EFMigrations>
</ItemGroup>
</Project>

Password for publishing is encrypted. Connection string for applying migration is non-encrypted. How to resolve this? Maybe, i make some mistake?

File ProjectName - Web Deploy.pubxml.user is excluded from GIT (has to be because of extension), but it is not normal to keep password of production database in a plain view.

Continue reading...
 
Back
Top