Keys/Secrets in appsettings.config #4617

cmthomps created 6 years ago

I'm trying to determine which keys/secrets in appsettings.config need to change for the purposes of securing our site.

There are a couple places in the default config file where there appear to be keys that should change. Specifically here:

"Clients": [
      {
        "ClientId": "client",
        "AllowedGrantTypes": [ "password" ],
        "ClientSecrets": [
          {
            "Value": "def2edf7-5d42-4edc-a84a-30136c340e13"
          }
        ],
        "AllowedScopes": [ "default-api" ]
      },

And here:

"JwtBearer": {
            "IsEnabled": "true",
            "SecurityKey": "AbpZeroTemplate_8CFB2EC534E14D56",
            "Issuer": "AbpZeroTemplate",
            "Audience": "AbpZeroTemplate"
        },

Can these these two secrets be safely changed? Is the JwtBearer section necessary?

Thanks, Craig

1 Answer(s)