| | | 1 | | using Syki.Back.Features.Cross.CreateUser; |
| | | 2 | | |
| | | 3 | | namespace Syki.Back.Configs; |
| | | 4 | | |
| | | 5 | | public static class IdentityConfigs |
| | | 6 | | { |
| | | 7 | | public static void AddIdentityConfigs(this WebApplicationBuilder builder) |
| | | 8 | | { |
| | 4 | 9 | | builder.Services.AddIdentity<SykiUser, SykiRole>() |
| | 4 | 10 | | .AddEntityFrameworkStores<SykiDbContext>() |
| | 4 | 11 | | .AddDefaultTokenProviders(); |
| | | 12 | | |
| | | 13 | | // TODO: Validate this with integration tests (password reset) |
| | 4 | 14 | | builder.Services.Configure<DataProtectionTokenProviderOptions>(options => |
| | 4 | 15 | | { |
| | 2 | 16 | | options.TokenLifespan = TimeSpan.FromHours(1); |
| | 6 | 17 | | }); |
| | | 18 | | |
| | 4 | 19 | | builder.Services.Configure<IdentityOptions>(options => |
| | 4 | 20 | | { |
| | 2 | 21 | | options.User.RequireUniqueEmail = true; |
| | 2 | 22 | | options.User.AllowedUserNameCharacters = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_@.+ |
| | 6 | 23 | | }); |
| | | 24 | | |
| | 4 | 25 | | builder.Services.Configure<IdentityOptions>(options => |
| | 4 | 26 | | { |
| | 2 | 27 | | options.Password.RequiredLength = 8; // The minimum length. |
| | 2 | 28 | | options.Password.RequireDigit = true; // Requires a number between 0-9. |
| | 2 | 29 | | options.Password.RequireLowercase = true; // Requires a lowercase character. |
| | 2 | 30 | | options.Password.RequireUppercase = true; // Requires an uppercase character. |
| | 2 | 31 | | options.Password.RequiredUniqueChars = 1; // Requires the minimum number of distinct characters. |
| | 2 | 32 | | options.Password.RequireNonAlphanumeric = true; // Requires a non-alphanumeric character (@, %, #, !, &, $, |
| | 6 | 33 | | }); |
| | | 34 | | |
| | | 35 | | // TODO: Validate this with integration tests |
| | 4 | 36 | | builder.Services.Configure<IdentityOptions>(options => |
| | 4 | 37 | | { |
| | 2 | 38 | | options.Lockout.AllowedForNewUsers = true; // Determines if a new user can be locked |
| | 2 | 39 | | options.Lockout.MaxFailedAccessAttempts = 3; // The number of failed access attempts un |
| | 2 | 40 | | options.Lockout.DefaultLockoutTimeSpan = TimeSpan.FromMinutes(5); // The amount of time a user is locked out |
| | 6 | 41 | | }); |
| | 4 | 42 | | } |
| | | 43 | | } |