refactoring secrets

DEVELOPER.md

@@ -66,6 +66,7 @@ When deployed on Azure logs aree available to stream. To enable:
 * navigate to your application in https://portal.azure.com
 * turn Application Logging (Filesystem) to On
 * set the Level to Information or Verbose
+* navigate to Log Stream
 
 You can also view the log stream using Azure CLI
 

StpFoodBlazor/Program.cs

@@ -1,4 +1,5 @@
 using Azure.Identity;
+using Azure.Security.KeyVault.Secrets;
 using Microsoft.AspNetCore.WebUtilities;
 using Microsoft.Extensions.Logging.AzureAppServices;
 using StpFoodBlazor.Components;
@@ -12,18 +13,34 @@
 if (builder.Environment.IsProduction())
 {
     // In production, use managed identity to access Key Vault
-    var keyVaultEndpoint = new Uri($"https://feastival.vault.azure.net/");
-    builder.Configuration.AddAzureKeyVault(
-        keyVaultEndpoint,
-        new DefaultAzureCredential());
+    var keyVaultUrl = new Uri("https://feastival.vault.azure.net/");
+    var credential = new DefaultAzureCredential();
+    var secretClient = new SecretClient(keyVaultUrl, credential);
 
-    builder.Logging.AddApplicationInsights(
+    try
+    {
+        KeyVaultSecret secret = await secretClient.GetSecretAsync("AppInsightsConnectionString");
+        string connectionString = secret.Value;
+
+        builder.Logging.AddApplicationInsights(
         configureTelemetryConfiguration: (config) =>
-            config.ConnectionString = builder.Configuration["AppInsights"],
+            config.ConnectionString = connectionString,
         configureApplicationInsightsLoggerOptions: (options) => {
             options.IncludeScopes = true;
             options.TrackExceptionsAsExceptionTelemetry = true;
         });
+    }
+    catch (Exception ex)
+    {
+        // Log the exception, but don't expose sensitive details
+        builder.Logging.AddConsole();
+        var logger = LoggerFactory.Create(builder => builder.AddConsole()).CreateLogger("Program");
+        logger.LogError(ex, "Failed to retrieve Application Insights connection string from Key Vault");
+        throw;
+    }
+
+
+
 }
 else
 {

StpFoodBlazor/appsettings.json

@@ -31,8 +31,5 @@
     }
 
   },
-  "AllowedHosts": "*",
-  "ConnectionStrings": {
-    "AppInsights": "InstrumentationKey=6eff6f01-7644-4b22-b2a0-9a39ac569f2b;IngestionEndpoint=https://centralus-2.in.applicationinsights.azure.com/;LiveEndpoint=https://centralus.livediagnostics.monitor.azure.com/;ApplicationId=d9b8a7fa-0af8-4a86-8f90-f787d897cc3b"
-  }
+  "AllowedHosts": "*"
 }