ASP.NET Identity - how to change password requirements when creating user programmatically

Question

I'm using default ASP.NET Core 1.1 template with Individual User Accounts authentication. The following code on VS2015 is complaining about the password requirements (such as length requirements, upper case, lower case etc.). I know we can set these requirements on the built-in RegisterViewModel by using DataAnnotations. But since I'm creating the users programmatically without using any ViewModel, the DataAnnotations will not work. Question: How can I change the password requirements and be able to run the following code:

List<String> usersList = GetAllUsers();

foreach (string s in usersList)
{
    var user = new ApplicationUser { UserName = s, UserRole = "TestRole" };
    var result = await _userManager.CreateAsync(user, "testpassword");
}

You can only achieve this by either calling the store directly, bypassing usermanager (bad idea) or by directly writing into the users table (worse idea). The password requirements are set in Startup.cs (by AddIdentity or you can explicitly override it, but then its valid for the whole application). Best to create a secure password, even when you create the user in Code — Tseng
– Tseng, Commented Mar 6, 2017 at 1:35
@Tseng It's a very simple app with specific password requirements that doe not meet all the default requirements for the password. Question: 1. How can I replace the last line of code above with a code using userStore. 2. If I were to use users table directly (using T-SQL) how do I hash the password? — nam
– nam, Commented Mar 6, 2017 at 3:38

travis.js · Accepted Answer · 2017-03-06 04:02:19Z

2

You can add options in the AddIdentity method...

public void ConfigureServices(IServiceCollection services)
{
    // Add framework services.
    services.AddDbContext<ApplicationDbContext>(options =>
        options.UseSqlServer(Configuration.GetConnectionString("DefaultConnection")));

    services.AddIdentity<ApplicationUser, IdentityRole>(options =>
        {
            options.Password.RequireDigit = false;
            options.Password.RequireLowercase = false;
            options.Password.RequireNonAlphanumeric = false;
            options.Password.RequireUppercase = false;
            options.Password.RequiredLength = 1;
            options.User.AllowedUserNameCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ@.";
        })
        .AddEntityFrameworkStores<ApplicationDbContext>()
        .AddDefaultTokenProviders();

    services.AddMvc();

    // Add application services.
    services.AddTransient<IEmailSender, AuthMessageSender>();
    services.AddTransient<ISmsSender, AuthMessageSender>();
}

edited Mar 6, 2017 at 4:02

answered Mar 6, 2017 at 3:50

travis.js

5,2911 gold badge28 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

nam Over a year ago

The AddIdentity in my startup.cs file is showing only

services.AddIdentity<ApplicationUser, ApplicationRole>()                 .AddEntityFrameworkStores<ApplicationDbContext>()                 .AddDefaultTokenProviders();

travis.js Over a year ago

Yes, the options part is what you will need to add to change the password options

Community · Accepted Answer · 2020-06-20 09:12:55Z

0

There is an up-to-date tutorial on the Microsoft Docs website.

Introduction to Identity on ASP.NET Core

There is a bit more information in the example code for other settings that you can work with, like the "options.Password."

edited Jun 20, 2020 at 9:12

CommunityBot

11 silver badge

answered Oct 11, 2017 at 22:08

Jack Thomson

949 bronze badges

Collectives™ on Stack Overflow

ASP.NET Identity - how to change password requirements when creating user programmatically

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related