Tenantry ProAPI reference

ConnectionStringEncryptionOptions class

Namespace: Tenantry.Pro.Strategies.DatabasePerTenant · Package: Tenantry.Pro · API reference

Configures at-rest encryption for cached connection strings. Set via opts.Encryption.Mode = ... inside pro.UseDatabasePerTenant(...).

public sealed class ConnectionStringEncryptionOptions

A 256-bit (32-byte) AES-256 symmetric key. Required when ConnectionStringEncryptionOptions.Mode is ConnectionStringEncryptionMode.AesKey. Do not store this value in source control. Load it from environment variables, Azure Key Vault, AWS Secrets Manager, or similar.

public byte[]? AesKey { get; set; }

Value: byte[]

opts.Encryption.AesKey = Convert.FromBase64String(config["Tenantry:EncryptionKey"]!);

The encryption mode. Default: ConnectionStringEncryptionMode.None (no encryption).

public ConnectionStringEncryptionMode Mode { get; set; }

ConnectionStringEncryptionMode enum

Determines how connection strings are encrypted before being stored in the cache.

DatabasePerTenantOptions<TKey> class

Options for the database-per-tenant strategy.

Properties