Add support for Azure.Storage.Blobs in ProtectKeysWithAzureKeyVault
See original GitHub issueWe are currently using
.AddDataProtection()
.PersistKeysToAzureBlobStorage(new Uri(blobUri))
.ProtectKeysWithAzureKeyVault(kv, keyVaultUri);
to enable scenarios like scale out and deployment swapping.
Currently PersistKeysToAzureBlobStorage and its package Microsoft.AspNetCore.DataProtection.AzureStorage depend on Microsoft.Azure.Storage.Blob. This aspect could also be implemented using Azure.Storage.Blobs.
In a similar way ProtectKeysWithAzureKeyVault and its package Microsoft.AspNetCore.DataProtection.AzureKeyVault depend on Microsoft.Azure.KeyVault. This aspect could also be implemented using Azure.Security.KeyVault.Keys.
As we understand the communication/versioning scheme these new libraries seem to be the way forward.
We would like to move to the new blob storage and key vault clients as well as Azure.Identity for all our MSI handling and would be happy if the data protection extensions could support that as well. Especially for new applications we would like to avoid the dependency on the “old” libraries.
Issue Analytics
- State:
- Created 4 years ago
- Comments:8 (6 by maintainers)
https://github.com/dotnet/aspnetcore/pull/18203
Oh just an update to the libraries we depend on? Yea, we can look at that for v5.