Generates Obfuscated Properties from `.env` File Content
Get Started
$ dotnet add package EnvObfuscatorReadme
EnvObfuscator
Generates Obfuscated Properties from .env File Content
- Generates
public static Memory<char>properties for each.enventry. - Generates
Validate_<PropertyName>(ReadOnlySpan<char>)for constant-time comparison.
🚀 Getting Started
To avoid embedding "raw data" as an assembly metadata, EnvObfuscator uses preceding block comment as a source.
using EnvObfuscator;
/*
# 👇 Copy & paste .env file content
API_KEY=abc123
SERVICE_URL=https://example.com
SECRET=PA$$WORD
EMPTY=
*/
[Obfuscate(seed: 12345)] // Omit the argument to use random seed
static partial class EnvSecrets
{
}
How to use the generated properties:
// Always returns a freshly decoded clone each time
var apiKey = EnvSecrets.API_KEY;
var cache = apiKey.ToString();
// Consuming decoded data...
// Zeroing out the span — more for peace of mind than actual security
apiKey.Span.Clear();
cache = "";
// Validation (no decoding, full-length compare to avoid timing differences)
if (EnvSecrets.Validate_SECRET("PA$$WORD"))
{
//...
}
Diagnostics
- Missing multiline comment yields a warning.
- Invalid lines are ignored and reported (first invalid line is shown).
- Invalid keys (non-identifiers, invalid characters, or duplicates) are errors.
- Seed value
0is allowed but warned (deterministic and predictable). - Obfuscation keys must be non-zero (error); change the seed to generate different keys.