[英]How do I define the password rules for Identity in ASP.NET 5 MVC 6 (vNext)?
The default Identity provider provided in ASP.NET 5 has very strict password rules by default, requiring a lower case character, an upper case character, a non-alphanumeric character, and a number. ASP.NET 5 中提供的默认身份提供程序默认具有非常严格的密码规则,需要小写字符、大写字符、非字母数字字符和数字。 I am looking for a way to change the password requirements for the provider.
我正在寻找一种方法来更改提供商的密码要求。
Previously in ASP.NET 4, the provider could be configured via the Web.config XML file, as previously answered .以前在 ASP.NET 4 中,可以通过 Web.config XML 文件配置提供程序, 如前所述。 However ASP.NET 5 uses the new code based configuration pattern and it is unclear how to configure the identity.
然而 ASP.NET 5 使用新的基于代码的配置模式,并且不清楚如何配置标识。
How can I change the password requirements for my application?如何更改我的应用程序的密码要求?
I actually ended up figuring this out, it turns out you need to supply AddDefaultIdentity with a suitable lambda expression that configures the IdentityOptions it provides.我实际上最终弄清楚了这一点,事实证明您需要为 AddDefaultIdentity 提供一个合适的 lambda 表达式来配置它提供的 IdentityOptions。 This is done inside the ConfigureServices method within the Startup class, like so:
这是在 Startup 类的 ConfigureServices 方法中完成的,如下所示:
public class Startup {
public void ConfigureServices(IServiceCollection services) {
// Add Identity services to the services container.
services.AddDefaultIdentity<ApplicationIdentityDbContext, ApplicationUser, IdentityRole>(Configuration,
o => {
o.Password.RequireDigit = false;
o.Password.RequireLowercase = false;
o.Password.RequireUppercase = false;
o.Password.RequireNonLetterOrDigit = false;
o.Password.RequiredLength = 7;
});
}
}
Update 2:更新 2:
The above was true in the beta1 versions of the framework, in the latest rc1 beta5 it has changed slightly to:以上在框架的 beta1 版本中是正确的,在最新的
rc1 beta5 中它略有变化:
services.AddIdentity<ApplicationUser, IdentityRole>(o => {
// configure identity options
o.Password.RequireDigit = false;
o.Password.RequireLowercase = false;
o.Password.RequireUppercase = false;
o.Password.RequireNonAlphanumeric = false;
o.Password.RequiredLength = 6;
})
.AddEntityFrameworkStores<ApplicationIdentityDbContext>()
.AddDefaultTokenProviders();
If you have set up a new Web project with Individual User Accounts
go to:如果您使用
Individual User Accounts
设置了一个新的 Web 项目,请访问:
App_Start -> IdentityConfig.cs
There you can edit the following defaults:您可以在此处编辑以下默认值:
manager.PasswordValidator = new PasswordValidator
{
RequiredLength = 6,
RequireNonLetterOrDigit = true,
RequireDigit = true,
RequireLowercase = true,
RequireUppercase = true,
};
in startup.cs:在startup.cs中:
services.AddIdentity<ApplicationUser, IdentityRole>(x =>
{
x.Password.RequiredLength = 6;
x.Password.RequireUppercase = false;
x.Password.RequireLowercase = false;
x.Password.RequireNonAlphanumeric = false;
}).AddEntityFrameworkStores<ApplicationDbContext>().AddDefaultTokenProviders();
What I wanted to do was to customize the password rule so that it should contain characters from at least 2 of the following groups: lower case, upper case, digits and special symbols .我想做的是自定义密码规则,使其至少包含以下组中的两个字符:小写、大写、数字和特殊符号。
This is not something that I could do by just changing PasswordValidator options:这不是我可以通过更改 PasswordValidator 选项来做到的:
manager.PasswordValidator = new PasswordValidator
{
RequiredLength = 6,
RequireNonLetterOrDigit = false,
RequireDigit = false,
RequireLowercase = false,
RequireUppercase = false,
};
So instead I created a custom validator by extending IIdentityValidator...因此,我通过扩展 IIdentityValidator 创建了一个自定义验证器...
First, create a new file CustomPasswordValidator.cs in your Extensions folder:首先,在 Extensions 文件夹中创建一个新文件 CustomPasswordValidator.cs:
public class CustomPasswordValidator : IIdentityValidator<string>
{
public int RequiredLength { get; set; }
public CustomPasswordValidator(int length) {
RequiredLength = length;
}
/*
* logic to validate password: I am using regex to count how many
* types of characters exists in the password
*/
public Task<IdentityResult> ValidateAsync(string password) {
if (String.IsNullOrEmpty(password) || password.Length < RequiredLength)
{
return Task.FromResult(IdentityResult.Failed(
$"Password should be at least {RequiredLength} characters"));
}
int counter = 0;
List<string> patterns = new List<string>();
patterns.Add(@"[a-z]"); // lowercase
patterns.Add(@"[A-Z]"); // uppercase
patterns.Add(@"[0-9]"); // digits
// don't forget to include white space in special symbols
patterns.Add(@"[!@#$%^&*\(\)_\+\-\={}<>,\.\|""'~`:;\\?\/\[\] ]"); // special symbols
// count type of different chars in password
foreach (string p in patterns)
{
if (Regex.IsMatch(password, p))
{
counter++;
}
}
if (counter < 2)
{
return Task.FromResult(IdentityResult.Failed(
"Please use characters from at least two of these groups: lowercase, uppercase, digits and special symbols"));
}
return Task.FromResult(IdentityResult.Success);
}
}
Then go to IdentityConfig.cs, and initialize it in Create method:然后进入 IdentityConfig.cs,在 Create 方法中初始化:
manager.PasswordValidator = new CustomPasswordValidator(8 /*min length*/);
/*
// You don't need this anymore
manager.PasswordValidator = new PasswordValidator
{
RequiredLength = 6,
RequireNonLetterOrDigit = true,
RequireDigit = true,
RequireLowercase = true,
RequireUppercase = true,
};
*/
See my tutorial for more details.有关更多详细信息,请参阅我的教程。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.