Skip to Main Content
Customer Feedback

We love feedback from you on our products and the problems in your daily work that you would like us to solve. Please describe the challenge you're encountering and your desired outcome. Be as detailed as possible.

For technical issues or bugs please head to Support or our Developer Community. You can assign up to 20 votes in total. Thank you for your feedback.

Status explanation: 'Future Consideration' = Continuing to collect further feedback, not planned at this time. 'Investigating' = Prioritized for deeper customer and feasibility investigations ahead of planning development.

Status Shipped
Categories Data management
Created by Guest
Created on May 6, 2024
Merged feedback
This idea has been merged into another idea. To comment or vote on this idea, please visit DXCS-I-431 Allow App Settings with key word 'Episerver'.

Better support for AppSettings in DXP Portal Merged

The way that appsettings work in the DXP environment makes it extremely difficult to set secrets and keep them out of the appsettings.json files. For instance, we are dealing with many Optimizely products that require items like API Keys be added to the configuration. These kinds of values, often referred to as secrets, should never go in a plain text file like appsettings.json files or anything else that gets checked in to source control. It is good that DXP uses key vault, but guess what??? You cannot input any keys that start with EPiServer or Optimizely. I thought I would be slick and just add a prefix (like Secret_Optimizely) and then use .AddEnvironmentVariables("Secret_") so they would get added but have the Secret_ get removed. Nope.....they also do not allow single underscores.

I understand that Opti may want to control some Opti related configuration, but if they aren't going to allow it, they should have some avenue to get these in (whether through a service request or something else). Otherwise you are stuck with doing some really out of the way things to keep secrets safe, or you have to go against best practices and just put them in appsettings.json.