如何覆盖 ASP.NET Core Identity 的密码策略

问题描述

默认情况下，ASP.NET Core Identity 的密码策略要求至少有一个特殊字符、一个大写字母、一个数字……

By default, ASP.NET Core Identity's password policy require at least one special character, one uppercase letter, one number, ...

如何更改此限制?

文档(https://docs.asp.net/en/latest/security/authentication/identity.html)

我尝试覆盖身份的用户管理器，但我没有看到管理密码策略的方法.

I try to override the Identity's User Manager but I don't see which method manages the password policy.

public class ApplicationUserManager : UserManager<ApplicationUser>
{
    public ApplicationUserManager(
        DbContextOptions<SecurityDbContext> options,
        IServiceProvider services,
        IHttpContextAccessor contextAccessor,
        ILogger<UserManager<ApplicationUser>> logger)
        : base(
              new UserStore<ApplicationUser>(new SecurityDbContext(contextAccessor)),
              new CustomOptions(),
              new PasswordHasher<ApplicationUser>(),
              new UserValidator<ApplicationUser>[] { new UserValidator<ApplicationUser>() },
              new PasswordValidator[] { new PasswordValidator() },
              new UpperInvariantLookupNormalizer(),
              new IdentityErrorDescriber(),
              services,
              logger
            // , contextAccessor
              )
    {
    }

    public class PasswordValidator : IPasswordValidator<ApplicationUser>
    {
        public Task<IdentityResult> ValidateAsync(UserManager<ApplicationUser> manager, ApplicationUser user, string password)
        {
            return Task.Run(() =>
            {
                if (password.Length >= 4) return IdentityResult.Success;
                else { return IdentityResult.Failed(new IdentityError { Code = "SHORTPASSWORD", Description = "Password too short" }); }
            });
        }
    }

    public class CustomOptions : IOptions<IdentityOptions>
    {
        public IdentityOptions Value { get; private set; }
        public CustomOptions()
        {
            Value = new IdentityOptions
            {
                ClaimsIdentity = new ClaimsIdentityOptions(),
                Cookies = new IdentityCookieOptions(),
                Lockout = new LockoutOptions(),
                Password = null,
                User = new UserOptions(),
                SignIn = new SignInOptions(),
                Tokens = new TokenOptions()
            };
        }
    }
}

我在启动类中添加了这个用户管理器依赖:

I add this user manager dependency in startup's class :

services.AddScoped<ApplicationUserManager>();

但是当我在控制器中使用 ApplicationUserManager 时，出现错误:处理请求时发生未处理的异常.

But when I'm using ApplicationUserManager in controllers, I have the error :An unhandled exception occurred while processing the request.

InvalidOperationException:尝试激活ApplicationUserManager"时，无法解析Microsoft.EntityFrameworkCore.DbContextOptions`1[SecurityDbContext]"类型的服务.

当我使用 ASP.NET Core Identity 的默认类时，用户的管理工作正常，所以这不是数据库问题，或者类似的问题

User's management works when I use the ASP.NET Core Identity's default classes, so it's not a database problem, or something like this

编辑 2:我找到了解决方案，您只需在启动类中配置 Identity.我的回答提供了一些细节.

推荐答案

最后太简单了……

无需重写任何类，您只需在启动类中配置身份设置，如下所示:

No need to override any class, you have just to configure the identity settings in your startup class, like this :

services.Configure<IdentityOptions>(options =>
{
    options.Password.RequireDigit = false;
    options.Password.RequiredLength = 5;
    options.Password.RequireLowercase = true;
    options.Password.RequireNonLetterOrDigit = true;
    options.Password.RequireUppercase = false;
});

或者你可以在添加的时候配置身份:

Or you can configure identity when you add it :

services.AddIdentity<ApplicationUser, IdentityRole>(options=> {
                options.Password.RequireDigit = false;
                options.Password.RequiredLength = 4;
                options.Password.RequireNonAlphanumeric = false;
                options.Password.RequireUppercase = false;
                options.Password.RequireLowercase = false;
            })
                .AddEntityFrameworkStores<SecurityDbContext>()
                .AddDefaultTokenProviders();

AS.NET Core 绝对是好东西 ...

AS.NET Core is definitively good stuff ...

这篇关于如何覆盖 ASP.NET Core Identity 的密码策略的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！