Ends in:
2 DAYS
1 HR
43 MIN
12 SEC
Ends in:
2 D
1 H
43 M
12 S
Open Closed

How to use secure DB connection string #5850


User avatar
0
shobhit created
  • ABP Framework version: v4.2.2
  • UI Type: Angular
  • Database System: EF Core (SQL Server, Oracle, MySQL, PostgreSQL, etc..) SQL Server
  • Tiered (for MVC) or Auth Server Separated (for Angular): yes
  • Exception message and full stack trace:
  • Steps to reproduce the issue:

How we can use secure DB connection string as currently it is plain text string in setting file.


11 Answer(s)
  • User Avatar
    0
    Anjali_Musmade created
    Support Team Support Team Member

    Hi

    You can override MultiTenantConnectionStringResolver https://docs.abp.io/en/abp/4.2/Connection-Strings#replace-the-connection-string-resolver the resolver which is listed here and use string encryption to encrypt and decrypt https://docs.abp.io/en/abp/latest/String-Encryption

    https://docs.abp.io/en/abp/4.2/Customizing-Application-Modules-Overriding-Services

    https://github.com/abpframework/abp/blob/rel-4.2/framework/src/Volo.Abp.MultiTenancy/Volo/Abp/MultiTenancy/MultiTenantConnectionStringResolver.cs

  • User Avatar
    0
    shobhit created

    Hello Anjali, Sorry but i couldn't follow your instructions. Do you have some simple step document or sample where

    1. i can encrypt plain text db connection string in api cofig file and use it
    2. if i have to do any changes in the code then what steps i have to follow. Please share a step by step instruction and example.
  • User Avatar
    0
    jfistelmann created

    Why do you even want to do that? That connection string is not visible to the public. See here

    Normally you configure your db server to only allow connections from specific ip addresses and/or you take additional security measurements.

    If using SQL server for example, you can take a look here https://learn.microsoft.com/en-us/sql/connect/ado-net/sql/sql-server-security?view=sql-server-ver16

    if you still want to encrypt the connection string, you can try implementing your own ConnectionStringResolver to do something with String Encryption

  • User Avatar
    0
    shobhit created

    if you still want to encrypt the connection string, you can try implementing your own ConnectionStringResolver to do something with String Encryption

    Can you help me to get an example?

  • User Avatar
    0
    alper created
    Support Team Director

    why don't you use environment variables. ABP uses ASP.NET Core's standard configuration class and you can store connection string or any other appsettings.json configuration in several places. See https://learn.microsoft.com/en-us/aspnet/core/fundamentals/configuration

  • User Avatar
    0
    shobhit created

    Thanks Alper. I am not sure if env. variable will work in containers and cloud PaaS services. Azure kye Vault is another best suitable approach for me. Can you help me how i can use it to store and get my connection string with ABP framework. Please share some sample.

    Thanks again.

  • User Avatar
    0
    jfistelmann created

    You can refer to this: https://learn.microsoft.com/en-us/aspnet/core/security/key-vault-configuration?view=aspnetcore-7.0

    or this:

    https://stackoverflow.com/questions/68224000/using-keyvault-secrets-to-override-appsettings-in-azure-app-service-and-locally

    just search google for something like azure key vault asp .net core appsettings.json and you'll find plenty of resources about that topic.

  • User Avatar
    0
    shobhit created

    Thanks @jfistelmann.

    Is it possible that i keep some placeholder in connection string and replace that placeholder in code with the actual value? if yes, what exactly i have to do?

  • User Avatar
    0
    jfistelmann created

    Thanks @jfistelmann.

    Is it possible that i keep some placeholder in connection string and replace that placeholder in code with the actual value? if yes, what exactly i have to do?

    With this here you can do anything you imagine :) by just implementing your own ConnectionStringResolver

  • User Avatar
    0
    shobhit created

    Thanks @jfistelmann. Can you please share some expample to create new middle layer

  • User Avatar
    0
    jfistelmann created

    Thanks @jfistelmann. Can you please share some expample to create new middle layer

    You just need to implement the interface and ensure it's added to the ServiceProvider. Are you experiencing any issues with that?

Made with ❤️ on ABP v9.1.0-preview. Updated on December 02, 2024, 12:35