gistfile1.txt

using Microsoft.Win32;

public static class SecretRegistry
{
    private const string KeyPath = @"SOFTWARE\YourCompany\Connector\Secrets";

    public static void SaveClientSecret(string secretPlaintext)
    {
        string protectedBase64 = DpapiSecretStore.ProtectToBase64(secretPlaintext);
        using (var key = Registry.LocalMachine.CreateSubKey(KeyPath, writable: true))
        {
            key.SetValue("CognitoClientSecret", protectedBase64, RegistryValueKind.String);
        }
    }

    public static string LoadClientSecret()
    {
        using (var key = Registry.LocalMachine.OpenSubKey(KeyPath, writable: false))
        {
            var protectedBase64 = key?.GetValue("CognitoClientSecret") as string;
            return DpapiSecretStore.UnprotectFromBase64(protectedBase64);
        }
    }
}