在UWP应用程序中存储API密钥和机密的推荐方法是什么？

Question

对于UWP应用程序,建议使用API​​密钥和秘密令牌等应用程序部署秘密的机制是什么？对于用户生成的身份验证令牌,PasswordVault很有意义,但我看不到将这些设置为应用程序部署的一部分的方法.到目前为止,我已将它们嵌入到应用程序中,这似乎并不"正确"或安全.

Answer 1

可以使用PasswordCredentialapi，代码片段：

string CredentialsName = "testing";
private PasswordCredential GetCredentialFromLocker()
{
    PasswordCredential credential = null;

    var vault = new PasswordVault();
    IReadOnlyList<PasswordCredential> credentialList = null;
    try
    {
        credentialList = vault.FindAllByUserName(Username);
    }
    catch
    {
        return credential;
    }
    if (credentialList.Count > 0)
    {
        credential = credentialList[0];
    }

    return credential;
}

public void CreatePassword(string password, string username)
{
    var vault = new PasswordVault();
    vault.Add(new PasswordCredential(CredentialsName, username, password));

}