IDataProtectionProvider setup support in Aspire

[berezovskyi]

How should one set up data protection in Aspire to ensure that the Aspire host can encrypt some data that is meant to be used by the ASP.NET Core app, for example?

I saw https://github.com/davidfowl/DataProtectionAspire but it did not contain specific instructions on how to do a per-resource setup. There was a mention of autoConfigureDataProtection but it seems to be Azure-specific?

[davidfowl]

Yes auto data protection is Azure Container Apps specific actually. Are you looking for something that works outside of azure?

[berezovskyi]

Thanks for getting back! My use case involves using IDataProtectionProvider in ASP.NET outside of Azure that works well but I don't know how to set up some data for the app when running under Aspire.

Ideally, I was thinking that an Aspire builder extension could set up an ephemeral provider for the entire lifetime of the Aspire host and make that provider accessible to e.g. setup code.

Another option that seems more instantly within reach is to use Azure Key Vault ASP.NET as an alternative to local options and set up https://github.com/rokeller/azure-keyvault-emulator in Aspire, for example.

I am interested in best practices as far as Aspire is concerned as well as starters/examples. Potentially relevant: james-gould/azure-keyvault-emulator#216