Remove data protection keys from Azure blob storage when deleting tenant

src/OrchardCore.Modules/OrchardCore.DataProtection.Azure/BlobModularTenantEvents.cs

@@ -0,0 +1,39 @@
+using Azure.Storage.Blobs;
+using Microsoft.Extensions.Logging;
+using OrchardCore.Environment.Shell.Removing;
+using OrchardCore.Modules;
+
+namespace OrchardCore.DataProtection.Azure;
+
+/// <summary>
+/// A tenant event that deletes data protection blobs from a container when a tenant is deleted.
+/// </summary>
+public class BlobModularTenantEvents : ModularTenantEvents
+{
+    private readonly BlobOptions _blobOptions;
+    private readonly ILogger<BlobModularTenantEvents> _logger;
+
+    public BlobModularTenantEvents(
+        BlobOptions blobOptions,
+        ILogger<BlobModularTenantEvents> logger)
+    {
+        _blobOptions = blobOptions;
+        _logger = logger;
+    }
+
+    /// <summary>
+    /// Removes the data protection blob from the container when a tenant is deleted.
+    /// </summary>
+    /// <param name="context">The <see cref="ShellRemovingContext"/></param>
+    public async override Task RemovingAsync(ShellRemovingContext context)
+    {
+        var blobClient = new BlobClient(
+            _blobOptions.ConnectionString,
+            _blobOptions.ContainerName,
+            _blobOptions.BlobName);
+
+        _logger.LogDebug("Deleting blob '{BlobName}' from container '{ContainerName}'.", _blobOptions.BlobName, _blobOptions.ContainerName);
+
+        await blobClient.DeleteIfExistsAsync();
+    }
+}

src/OrchardCore.Modules/OrchardCore.DataProtection.Azure/Startup.cs

@@ -39,6 +39,8 @@ public override void ConfigureServices(IServiceCollection services)
                         options.ContainerName,
                         options.BlobName);
                 });
+
+            services.AddSingleton<IModularTenantEvents, BlobModularTenantEvents>();
         }
         else
         {