Configuration of secrets
Store sensitive data, such as passwords, shared secrets or API Keys in the file secrets.properties inside the configuration directory.
For example, define an API key like this:
secrets.properties
# API key for external service
secret.api.key=mySecretApiKey
Do not store secrets in the application.properties.
This way, you avoid storing sensitive information directly in the application.properties file to share it more easily without exposing secrets.
The secrets.properties file may also be used to store the
server credentials for the GIS server you want to protect with security.manager for OGC. See Protect a service requiring authentication for details.