我正在使用Azure KeyVault来存储我的数据库凭据,现在我需要在服务代码中访问它,但我已经把客户端ID和客户端密钥硬编码进去了。
如何避免这种不安全的硬编码呢?
1) I don't want to store client id and client secret in certificates, as
deployed certificates are again insecure
2) My app is not hosted on Azure App service, so I can't use App Settings to
store client id and client secret.
有没有办法让Azure Active Directory仅在从我的应用程序URL发出请求时返回访问令牌? 否则,如何保护客户端ID和客户端密钥免受黑客攻击?