Generates Obfuscated Properties from `.env` File Content
Get Started
$ dotnet add package EnvObfuscatorReadme
EnvObfuscator
Generates Obfuscated Properties from .env File Content
- Generates
public static Memory<char>properties for each.enventry. - Generates
Validate_<PropertyName>(ReadOnlySpan<char>)for constant-time comparison.
🚀 Getting Started
To avoid embedding "raw data" as an assembly metadata, EnvObfuscator uses preceding block comment as a source.
using EnvObfuscator;
/*
# 👇 Copy & paste .env file content
API_KEY=abc123
SERVICE_URL=https://example.com
SECRET=PA$$WORD
EMPTY=
*/
[Obfuscate(seed: 12345)] // Omit the argument to use random seed
static partial class EnvSecrets
{
}
[!NOTE] The properties and methods are contained within a dedicated class called
<TargetClass>Loaderthat is designed to remove the unnecessaryObfuscateattribute annotation from the obfuscation class (target partial type will have GUID-named decoys).
// Always returns a freshly decoded clone each time
var apiKey = EnvSecretsLoader.API_KEY;
var cache = apiKey.ToString();
// Consuming decoded data...
// Zeroing out the span — more for peace of mind than actual security
apiKey.Span.Clear();
cache = "";
// Validation (no decoding, full-length compare to avoid timing differences)
if (EnvSecretsLoader.Validate_SECRET("PA$$WORD"))
{
//...
}
[!TIP] As
stringtype is immutable (cannot zero them explicitly) and GC-collected object (not erased on demand), instead using can achieve validation under full control.