# BitwardenSecretManagerExtensions - Kind: `class` - Package: [CommunityToolkit.Aspire.Hosting.Bitwarden.SecretManager](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager.md) - Version: `13.4.1-beta.706` - Namespace: `Aspire.Hosting` - Target framework: `net10.0` - Source: [GitHub](https://github.com/CommunityToolkit/Aspire/blob/d479e13473b1d29d06b974f144a0049289a3cb5c/src/CommunityToolkit.Aspire.Hosting.Bitwarden.SecretManager/BitwardenSecretManagerExtensions.cs) Extension methods for adding Bitwarden Secrets Manager resources. ## Definition ```csharp namespace Aspire.Hosting; public static class BitwardenSecretManagerExtensions { // ... } ``` ## Methods - [AddBitwardenSecretManager(IDistributedApplicationBuilder, string, IResourceBuilder, IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#addbitwardensecretmanager-idistributedapplicationbuilder-string-iresourcebuilder-parameterresource-iresourcebuilder-parameterresource-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats export` -- Adds a Bitwarden Secrets Manager resource. The `projectNameOrId` parameter resolves to either a project name (creates or finds by name) or a project identifier GUID (adopts the existing project by ID). - [AddSecret(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#addsecret-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Adds a managed Bitwarden secret whose local and remote names are the same. The secret value is resolved from configuration key `Parameters:{parentName}-{name}`. - [AddSecret(IResourceBuilder, string, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#addsecret-iresourcebuilder-bitwardensecretmanagerresource-string-string) : `IResourceBuilder` `extension` `ats export` -- Adds a managed Bitwarden secret with distinct Aspire and remote names. The secret value is resolved from configuration key `Parameters:{parentName}-{name}`. - [AsSecretId(IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#assecretid-iresourcebuilder-bitwardensecretresource) : `IExpressionValue` `extension` `ats export` -- Returns an `ApplicationModel.IExpressionValue` that resolves to the Bitwarden secret identifier. Pass it to `WithEnvironment` to inject the secret ID as an environment variable. The app then uses the Bitwarden SDK to fetch the secret value at runtime. - [GetSecret(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#getsecret-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Gets or creates a Bitwarden secret reference whose Aspire and remote names are the same. The secret must already exist in Bitwarden; use [BitwardenSecretManagerExtensions.AddSecret(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#addsecret-iresourcebuilder-bitwardensecretmanagerresource-string) if Aspire should own and write the secret value. - [GetSecret(IResourceBuilder, string, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#getsecret-iresourcebuilder-bitwardensecretmanagerresource-string-string) : `IResourceBuilder` `extension` `ats export` -- Gets or creates a Bitwarden secret reference with distinct Aspire and remote names. The secret must already exist in Bitwarden; use [BitwardenSecretManagerExtensions.AddSecret(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#addsecret-iresourcebuilder-bitwardensecretmanagerresource-string) if Aspire should own and write the secret value. - [GetSecret(IResourceBuilder, string, Guid)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#getsecret-iresourcebuilder-bitwardensecretmanagerresource-string-guid) : `IResourceBuilder` `extension` `ats export` -- Gets or creates a Bitwarden secret reference by secret identifier. Use this when multiple secrets share the same name and the identifier is the only unambiguous key. The secret must already exist in Bitwarden; use [BitwardenSecretManagerExtensions.AddSecret(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#addsecret-iresourcebuilder-bitwardensecretmanagerresource-string) if Aspire should own and write the secret value. - [WithApiUrl(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withapiurl-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden API URL. - [WithApiUrl(IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withapiurl-iresourcebuilder-bitwardensecretmanagerresource-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden API URL using a parameter. - [WithApiUrl(IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withapiurl-iresourcebuilder-bitwardensecretmanagerresource-iresourcebuilder-externalserviceresource) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden API URL using an external service resource. The Bitwarden resource will wait for the external service before authenticating. - [WithApiUrl(IResourceBuilder, EndpointReference)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withapiurl-iresourcebuilder-bitwardensecretmanagerresource-endpointreference) : `IResourceBuilder` `extension` `ats ignored` -- Overrides the Bitwarden API URL using an endpoint from another resource in the Aspire model. - [WithAuthCacheDirectory(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withauthcachedirectory-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Overrides the AppHost auth cache directory (Bitwarden SDK auth session used by the AppHost reconciler). Defaults to the Aspire store when not set. Override to reuse a cached auth session across CI runs. To configure the auth cache directory inside the deployed app, use [BitwardenSecretManagerExtensions.WithBitwardenAuthCacheDirectory(IResourceBuilder, IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachedirectory-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-string). - [WithBitwardenAccessToken(IResourceBuilder, IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenaccesstoken-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden access token injected into the connection for `source`. By default the management token is used. Supply a least-privilege read-only token here. - [WithBitwardenAccessToken(IResourceBuilder, string, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenaccesstoken-iresourcebuilder-tdestination-string-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats ignored` -- Overrides the Bitwarden access token injected into the specified connection. By default the management token is used. Supply a least-privilege read-only token here. Use the source-based overload when the connection name equals the Bitwarden resource name. - [WithBitwardenAuthCacheDirectory(IResourceBuilder, IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachedirectory-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Configures the directory where the Bitwarden SDK stores its auth cache inside the resource, for the connection associated with `source`. - [WithBitwardenAuthCacheDirectory(IResourceBuilder, string, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachedirectory-iresourcebuilder-tdestination-string-string) : `IResourceBuilder` `extension` `ats ignored` -- Configures the directory where the Bitwarden SDK stores its auth cache inside the resource, for the specified connection. Use the source-based overload when the connection name equals the Bitwarden resource name. - [WithBitwardenAuthCacheDirectory(IResourceBuilder, IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachedirectory-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats export` -- Configures the directory where the Bitwarden SDK stores its auth cache inside the resource, using a parameter, for the connection associated with `source`. - [WithBitwardenAuthCacheDirectory(IResourceBuilder, string, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachedirectory-iresourcebuilder-tdestination-string-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats ignored` -- Configures the directory where the Bitwarden SDK stores its auth cache inside the resource, using a parameter, for the specified connection. Use the source-based overload when the connection name equals the Bitwarden resource name. - [WithBitwardenAuthCacheVolume(IResourceBuilder, IResourceBuilder, string?, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachevolume-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-string-string) : `IResourceBuilder` `extension` `ats export` -- Mounts a named volume and configures the Bitwarden SDK to store its auth cache there, for the connection associated with `source`. Use this for container resources. For process resources or when the container path is already known, use [BitwardenSecretManagerExtensions.WithBitwardenAuthCacheDirectory(IResourceBuilder, IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachedirectory-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-string) instead. - [WithBitwardenAuthCacheVolume(IResourceBuilder, string, string?, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withbitwardenauthcachevolume-iresourcebuilder-tdestination-string-string-string) : `IResourceBuilder` `extension` `ats ignored` -- Mounts a named volume and configures the Bitwarden SDK to store its auth cache there, for the specified connection. Use this for container resources. Use the source-based overload when the connection name equals the Bitwarden resource name. - [WithCacheFile(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withcachefile-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Overrides the AppHost cache file path (integration bookkeeping: Bitwarden project ID, secret ID mappings). Defaults to `.bitwarden/{resourceName}.{environment}.json` relative to the AppHost directory. Override to share the cache across multiple AppHost projects, or to store it in a CI cache directory. - [WithIdentityUrl(IResourceBuilder, string)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withidentityurl-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden identity URL. - [WithIdentityUrl(IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withidentityurl-iresourcebuilder-bitwardensecretmanagerresource-iresourcebuilder-parameterresource) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden identity URL using a parameter. - [WithIdentityUrl(IResourceBuilder, IResourceBuilder)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withidentityurl-iresourcebuilder-bitwardensecretmanagerresource-iresourcebuilder-externalserviceresource) : `IResourceBuilder` `extension` `ats export` -- Overrides the Bitwarden identity URL using an external service resource. The Bitwarden resource will wait for the external service before authenticating. - [WithIdentityUrl(IResourceBuilder, EndpointReference)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withidentityurl-iresourcebuilder-bitwardensecretmanagerresource-endpointreference) : `IResourceBuilder` `extension` `ats ignored` -- Overrides the Bitwarden identity URL using an endpoint from another resource in the Aspire model. - [WithReference(IResourceBuilder, IResourceBuilder, string?)](/reference/api/csharp/communitytoolkit.aspire.hosting.bitwarden.secretmanager/bitwardensecretmanagerextensions/methods.md#withreference-iresourcebuilder-tdestination-iresourcebuilder-bitwardensecretmanagerresource-string) : `IResourceBuilder` `extension` `ats export` -- Injects structured Bitwarden client configuration into the destination resource.