Regarding Azure Service bus connection string hide or encryption

Question

Hi,

I am working on Reactjs application with having backend in python and okta as an identity provider for our application. as we are trying to use azure bus service to communicate backend with frontend, but according to code sample and documentation, there is connection string which consist of sharedaccess key name and key value hard coded in url which we want to hide as it is a security issue for us, so is there any way to tackle this issue .

Thank You for help

Answer 1

Service Bus supports Azure AD for authentication and authorization. But this will require your users to be on the same Azure AD tenant as your azure resources. Since you are using Okta, I believe this would be harder to implement.

The better alternative would be to generate specific short lived SAS tokens via a protected service, which the UI will request and leverage.