Where to save the private key that is used to generate and validate the token?

Question

I'm using a private key to generate and validate the token. I'll be using this private key in 3 different .cs files. Right now, it's hard-coded in these 3 files.

My question is, Where to save this private key in the project. (not DB or Azure).

Thanks!

You can save the key in your configuration files. appsettings.json — Cujoey, Jul 26 '19 at 15:51

score 0 · Answer 1 · answered Jul 26 '19 at 16:17

0

If you are sure the key will not change. You can create a resource file for it. This way your key is not readable in production. At least not easy as store it in config. Find more information about resources here: How to create and use resources in .NET

answered Jul 26 '19 at 16:17

Andro Font

356
1
13

Keys should regularly be rotated, and there should be a way to revoke/replace compromised keys. – Gabor Lengyel Jul 26 '19 at 17:56

Where to save the private key that is used to generate and validate the token?

1 Answers1