Configuring Password Requirements in ASP.net Core 3 Identity Doesn't Work

Question

I've created a fresh .net Core 3.1 solution with ASP.net Identity.

The Register page requires a minimum of 6 characters.

I want to configure these requirements thus

// This method gets called by the runtime. Use this method to add services to the container.
public void ConfigureServices(IServiceCollection services)
{
    services.Configure<IdentityOptions>(options =>
    {
        options.Password.RequiredLength = 1;
        options.Password.RequireUppercase = true;
        options.Password.RequireLowercase = true;
        options.Password.RequireDigit = false;
        options.Password.RequireNonAlphanumeric = false;
        options.Password.RequiredUniqueChars = 5;
    });

    services.AddDbContext<ApplicationDbContext>(options =>
        options.UseSqlServer(
            Configuration.GetConnectionString("DefaultConnection")));

    services.AddDefaultIdentity<IdentityUser>(options => options.SignIn.RequireConfirmedAccount = true)
        .AddEntityFrameworkStores<ApplicationDbContext>();


    services.AddControllersWithViews();

    services.AddRazorPages();
}

I've added the password options at the top there, but they are being ignored. 6 to 100 characters are still required to be entered when registering.

I've found many articles, eg:

Saying this should work. There isn't even an error so not sure how to problem solve this.

How can I get this working? Thanks.

If I am not wrong, you should configure Identity after adding it. So try to AddDefaultIdentity then Configure<IdentityOptions>. If that doesn't work, maybe try to AddDbContext before these 2. This is a nice link. — Emil Terman
– Emil Terman, Commented May 9, 2020 at 11:49
I did that originally. None of the things you suggest fix it. — niico
– niico, Commented May 9, 2020 at 11:50
Hmm even when I copy the entire ConfigureServices method out of your link, it still gets stuck on a 6 character RequiredLength even though I set it to 1. If I set it to 7 it also stays stuck on 6, as per my screen grab. — niico
– niico, Commented May 9, 2020 at 11:54
Turns out it was the viewmodel that had validation on it DOH — niico
– niico, Commented Jun 16, 2022 at 12:55

saurav Sinha · Accepted Answer · 2020-06-25 09:00:41Z

2

Hi @niico this identity password option will work when you submit the form and and Createasync function will return false. and it will jump to the

foreach (var error in result.Errors)
                {
                    ModelState.AddModelError(string.Empty, error.Description);
                }

and bind the validation message and return to the page and will show in the top.

Thanks

answered Jun 25, 2020 at 9:00

saurav Sinha

4467 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

David Smit · Accepted Answer · 2021-02-18 07:11:38Z

0

A simple thing that you can double-check, is if you are indeed passing the password when creating the user. If you do not pass the password, Identity doesn't run any of its password validation rules, but still creates the user without errors.

 result = await _userManager.CreateAsync(user, Input.Password);

answered Feb 18, 2021 at 7:11

David Smit

8491 gold badge15 silver badges34 bronze badges

Comments

user3585447 · Accepted Answer · 2024-08-20 14:22:56Z

0

This limit (6 to 100 chars) is hardcoded in source of register page.

\Identity\Pages\Account\Register.cshtml.cs

You can edit the page afrer scaffold Identity templates.

[StringLength(100, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
[DataType(DataType.Password)]
public string Password { get; set; }

answered Aug 20, 2024 at 14:22

user3585447

1212 silver badges2 bronze badges

Collectives™ on Stack Overflow

Configuring Password Requirements in ASP.net Core 3 Identity Doesn't Work

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related