How to store password and login in a web application?

Question

ASP.NET

Good afternoon. I need to access a third party api from my site that requires basic auth to get data.

I've looked all over the internet and have not found a single adequate answer to this question.

Where and how can I safely store the password and login on my site, or in an encrypted database, or in some encrypted configs ...? How is this even implemented in production?

Thanks

Answer 1

On the backend, there is not much difference where to put it.
Option times: in cleartext to environment variables, appsettings, or any other config. For convenience, you can encode in base64, but not necessarily.
Option two: secure, but difficult. Using an external service like Vault or Azure Key Vault .
UPD: completely forgot. Never commit secrets to git. If you commit and forget, you will be tortured to clean up.
It is for this reason that they should be stored in separate files, and not in code. And the files themselves are written in .gitignore

Answer 2

https://docs.microsoft.com/en-us/aspnet/core/secur...