RepletoryLib.Security.Secrets 1.0.0

RepletoryLib.Security.Secrets

Secret management with Environment, User Secrets, and Azure Key Vault providers.

Part of the RepletoryLib ecosystem -- standalone, reusable .NET 10 libraries with zero business logic.

Overview

RepletoryLib.Security.Secrets provides a unified ISecretProvider interface for retrieving secrets from multiple sources. It ships with three providers -- Environment Variables, .NET User Secrets, and Azure Key Vault -- and automatically selects the right one based on configuration.

Key Features

• ISecretProvider -- Unified get/set/delete interface for secrets
• Environment provider -- Read/write environment variables
• User Secrets provider -- Read from .NET User Secrets (development)
• Azure Key Vault provider -- Full CRUD via Azure.Identity
• Configurable -- Select provider via appsettings.json

Installation

dotnet add package RepletoryLib.Security.Secrets

Dependencies

Quick Start

using RepletoryLib.Security.Secrets;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddRepletorySecrets(builder.Configuration);

{
  "Secrets": {
    "Provider": "Environment"
  }
}

For Azure Key Vault:

{
  "Secrets": {
    "Provider": "AzureKeyVault",
    "AzureKeyVaultUri": "https://my-vault.vault.azure.net/"
  }
}

Configuration

SecretsOptions

Usage Examples

Reading and Writing Secrets

using RepletoryLib.Security.Secrets.Interfaces;

public class ConfigService
{
    private readonly ISecretProvider _secrets;

    public ConfigService(ISecretProvider secrets) => _secrets = secrets;

    public async Task<string> GetDatabasePasswordAsync()
    {
        var password = await _secrets.GetSecretAsync("DatabasePassword");
        return password ?? throw new InvalidOperationException("Database password not configured");
    }

    public async Task RotateApiKeyAsync()
    {
        var newKey = Guid.NewGuid().ToString("N");
        await _secrets.SetSecretAsync("ExternalApiKey", newKey);
    }

    public async Task CleanupAsync()
    {
        await _secrets.DeleteSecretAsync("TempSecret");
    }
}

Provider Capabilities

Integration with Other RepletoryLib Packages

License

This project is licensed under the MIT License.

Copyright (c) 2024-2026 Repletory.

For complete documentation, infrastructure setup, and configuration reference, see the RepletoryLib main repository.