Using Azure Key Vault to store connection strings

Azure Key Vault offers secure storage for sensitive information like passwords, secrets, etc. If you host your PHPRunner or ASPRunner.NET application in Azure, it makes sense to store your connection string in Key Vault. In this article we will show you how this can be done.

Create a Key Vault in Azure

1. Create an application in Azure. Write down the tenantId, clientId, and clientSecret values.

2. Sign in to Azure and create a subscription. You need to specify a subscription name and select a billing account.

Further information:

3. Return to the portal homepage and proceed to Key Vaults. Click ‘Create’. Select a subscription, select a Resource group (or create a new one). Enter the name of the Key Vault.

4. Now it’s time to grant access permissions. Under the Key Vault you just created, proceed to ‘Access control (IAM)’. Add -> Add Role Assignment, select ‘Key Vault Certificates Officer’ using search option, click ‘Next’. Select ‘User, group, or service principal’

Click ‘Select members’, search for your app name and select it. . Find your app (not user) in the search bar on the right. Next, Review + assign.

Permissions may take a little time to take effect, but in our situation they worked right away.

5. Create a secret. The secret is the actual object that stores the sensitive information, the database password in our case. Select your Key Vault and under Objects -> Secrets -> Generate/Import enter the secret name (“pass” in our case) and its value.

Now we are ready to use this in our code.

Using Key Vault in PHPRunner

1. Under Style Editor -> Custom Files add a new file called keyvault.php. Paste the code below and use your own tenantId, clientId, and clientSecret values.


<?php function getSecret($secretName){
	$tenantId = '...';
	$clientId = '...'; 
	$clientSecret="...";
	$vaultUrl = "https://xkvault.vault.azure.net/";

	$url = "https://login.microsoftonline.com/".$tenantId."/oauth2/token";
	$parameters = array(
		'grant_type' =?> 'client_credentials',
		'client_id' => $clientId,
		'client_secret' => $clientSecret,
		'resource' => '
	);
	$headers = array("Content-Type"=>"application/x-www-form-urlencoded");
	$response = runner_post_request($url, $parameters, $headers);

	$json = runner_json_decode($response["content"]);
	if (!isset($json['access_token'])) {
		throw new Exception("Failed to get access token: " . $response);
	}
	$accessToken = $json['access_token'];

	$url = $vaultUrl . "secrets/".$secretName."?api-version=7.3";

	$headers = array(
		"Authorization"=>"Bearer ".$accessToken,
		"Content-Type"=>"application/json"
	);
	$response = runner_http_request($url, "", "GET", $headers);
	$result = runner_json_decode($response["content"]);
	return $result['value'];
}
?>

2. Example of using Key Vault in your application. We will create a new Database Server Connection and will retrieve the database password from Key Vault. In this example we use a MySQL database.


include("keyvault.php");
$host="localhost";
$user="root";
$pwd=getSecret("pass");
$port="";
$sys_dbname="cars";

Using Key Vault in ASPRunner.NET

1. Under Style Editor -> Custom Files add a new file called keyvault.cs. Paste the code below and use your own tenantId, clientId, and clientSecret values.


using System;
using System.IO;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Web;
using System.Web.Mvc;
using System.Reflection;
using runnerDotNet;
namespace runnerDotNet
{
	public partial class CommonFunctions
	{
		public static XVar getSecret(dynamic secretName)
		{
			dynamic accessToken = null, clientId = null, clientSecret = null, headers = null, json = XVar.Array(), parameters = null, result = XVar.Array(), tenantId = null, url = null, var_response = XVar.Array(), vaultUrl = null;
			tenantId = new XVar("...");
			clientId = new XVar("...");
			clientSecret = new XVar("...");
			vaultUrl = new XVar("
			url = XVar.Clone(MVCFunctions.Concat(" tenantId, "/oauth2/token"));
			parameters = XVar.Clone(new XVar("grant_type", "client_credentials", "client_id", clientId, "client_secret", clientSecret, "resource", "
			headers = XVar.Clone(new XVar("Content-Type", "application/x-www-form-urlencoded"));
			var_response = XVar.Clone(MVCFunctions.runner_post_request((XVar)(url), (XVar)(parameters), (XVar)(headers)));
			json = XVar.Clone(CommonFunctions.runner_json_decode((XVar)(var_response["content"])));
			if(XVar.Pack(!(XVar)(json.KeyExists("access_token"))))
			{
				new Exception((XVar)(MVCFunctions.Concat("Failed to get access token: ", var_response)));
			}
			accessToken = XVar.Clone(json["access_token"]);
			url = XVar.Clone(MVCFunctions.Concat(vaultUrl, "secrets/", secretName, "?api-version=7.3"));
			headers = XVar.Clone(new XVar("Authorization", MVCFunctions.Concat("Bearer ", accessToken), "Content-Type", "application/json"));
			var_response = XVar.Clone(MVCFunctions.runner_http_request((XVar)(url), new XVar(""), new XVar("GET"), (XVar)(headers)));
			result = XVar.Clone(CommonFunctions.runner_json_decode((XVar)(var_response["content"])));
			return result["value"];
		}
	}
}

2. In the BeforeConnect event, use the following code:


dynamic pass = CommonFunctions.getSecret("pass");
GlobalVars.ConnectionStrings["conn"] = MVCFunctions.Concat("Server=localhost;Database=cars;User Id=root;Password=",pass);

Teknologi Terkini

Agen Togel Terpercaya

Bandar Togel

Sabung Ayam Online

Berita Terkini

Artikel Terbaru

Berita Terbaru

Penerbangan

Berita Politik

Berita Politik

Software

Software Download

Download Aplikasi

Berita Terkini

News

Jasa PBN

Jasa Artikel

News

Breaking News

Berita

Xrep

Using Azure Key Vault to store connection strings – Xlinesoft Blog