默认情况下,ASP.NET Core Identity 的密码策略要求至少有一个特殊字符、一个大写字母、一个数字……
By default, ASP.NET Core Identity's password policy require at least one special character, one uppercase letter, one number, ...
如何更改此限制?
文档(docs.asp/en/latest/security/authentication/identity.html)
我尝试覆盖身份的用户管理器,但我没有看到管理密码策略的方法.
I try to override the Identity's User Manager but I don't see which method manages the password policy.
public class ApplicationUserManager : UserManager<ApplicationUser> { public ApplicationUserManager( DbContextOptions<SecurityDbContext> options, IServiceProvider services, IHttpContextAccessor contextAccessor, ILogger<UserManager<ApplicationUser>> logger) : base( new UserStore<ApplicationUser>(new SecurityDbContext(contextAccessor)), new CustomOptions(), new PasswordHasher<ApplicationUser>(), new UserValidator<ApplicationUser>[] { new UserValidator<ApplicationUser>() }, new PasswordValidator[] { new PasswordValidator() }, new UpperInvariantLookupNormalizer(), new IdentityErrorDescriber(), services, logger // , contextAccessor ) { } public class PasswordValidator : IPasswordValidator<ApplicationUser> { public Task<IdentityResult> ValidateAsync(UserManager<ApplicationUser> manager, ApplicationUser user, string password) { return Task.Run(() => { if (password.Length >= 4) return IdentityResult.Success; else { return IdentityResult.Failed(new IdentityError { Code = "SHORTPASSWORD", Description = "Password too short" }); } }); } } public class CustomOptions : IOptions<IdentityOptions> { public IdentityOptions Value { get; private set; } public CustomOptions() { Value = new IdentityOptions { ClaimsIdentity = new ClaimsIdentityOptions(), Cookies = new IdentityCookieOptions(), Lockout = new LockoutOptions(), Password = null, User = new UserOptions(), SignIn = new SignInOptions(), Tokens = new TokenOptions() }; } } }我在启动类中添加了这个用户管理器依赖:
I add this user manager dependency in startup's class :
services.AddScoped<ApplicationUserManager>();但是当我在控制器中使用 ApplicationUserManager 时,出现错误:处理请求时发生未处理的异常.
But when I'm using ApplicationUserManager in controllers, I have the error : An unhandled exception occurred while processing the request.
InvalidOperationException:尝试激活ApplicationUserManager"时,无法解析Microsoft.EntityFrameworkCore.DbContextOptions`1[SecurityDbContext]"类型的服务.
当我使用 ASP.NET Core Identity 的默认类时,用户的管理工作正常,所以这不是数据库问题,或者类似的问题
User's management works when I use the ASP.NET Core Identity's default classes, so it's not a database problem, or something like this
编辑 2:我找到了解决方案,您只需在启动类中配置 Identity.我的回答提供了一些细节.
推荐答案最后太简单了……
无需重写任何类,您只需在启动类中配置身份设置,如下所示:
No need to override any class, you have just to configure the identity settings in your startup class, like this :
services.Configure<IdentityOptions>(options => { options.Password.RequireDigit = false; options.Password.RequiredLength = 5; options.Password.RequireLowercase = true; options.Password.RequireNonLetterOrDigit = true; options.Password.RequireUppercase = false; });或者你可以在添加的时候配置身份:
Or you can configure identity when you add it :
services.AddIdentity<ApplicationUser, IdentityRole>(options=> { options.Password.RequireDigit = false; options.Password.RequiredLength = 4; options.Password.RequireNonAlphanumeric = false; options.Password.RequireUppercase = false; options.Password.RequireLowercase = false; }) .AddEntityFrameworkStores<SecurityDbContext>() .AddDefaultTokenProviders();AS.NET Core 绝对是好东西 ...
AS.NET Core is definitively good stuff ...
更多推荐
如何覆盖 ASP.NET Core Identity 的密码策略
发布评论