In this chapter, we are going to see how we can keep secrets in Azure Key Vault. We will also be looking at how we can use API keys to secure our own keys with authentication and role-based authorization. To gain first-hand experience with API security, we will build a fully functional FinTech API.
Our API will extract third-party API data using a private key (kept safe in Azure Key Vault). We will then secure our API with two API keys; one key will be used internally and a second key will be used by external users.
The following topics are covered in this chapter:
- Accessing the Morningstar API
- Storing the Morningstar API in Azure Key Vault
- Creating the dividend calendar ASP.NET Core web application in Azure
- Publishing our web application
- Using an API key to secure our dividend calendar API
- Testing...
