Skip to content

Conversation

@wcabus
Copy link
Contributor

@wcabus wcabus commented Oct 15, 2025

Added a warning about using Redis cache to store Data Protection keys, since Redis doesn't persist data across service restarts by default. Provided links for configuration guidance.

Fixes #36305


Internal previews

📄 File 🔗 Preview link
aspnetcore/security/data-protection/implementation/key-storage-providers.md Key storage providers in ASP.NET Core

Added a warning about using Redis cache to store Data Protection keys, since Redis doesn't persist data across service restarts by default. Provided links for configuration guidance.
Copy link
Contributor

@wadepickett wadepickett left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great work @wcabus, thanks! Sorry this sat in the queue for so long before it was reviewed.

The warning is clear, technically accurate, free of language errors, and correctly placed, looks good.

@wadepickett wadepickett requested a review from Copilot November 7, 2025 17:15
@wadepickett wadepickett self-assigned this Nov 7, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a critical warning to the Redis key storage provider documentation, alerting developers that Redis doesn't persist data by default when restarting, which can cause Data Protection to issue new keys and invalidate previously protected data.

Key Changes:

  • Added a WARNING callout explaining Redis default persistence behavior and its impact on data protection keys
  • Provided guidance on configuring Redis persistence with links to Redis documentation
  • Included specific instructions for Azure Managed Redis and Azure Cache for Redis persistence configuration

@wadepickett wadepickett merged commit b7d73d2 into dotnet:main Nov 7, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Provide warning for using Redis to store Data Protection keys

2 participants