How to customize password strength rules?

[ronnylam1210]

I want to modify the default password strength rules. How should I modify it?
Thank you!

[LSNicholls]

there is a class called PasswordStrengthValidator, and this is set up in Startup.cs:

services.AddSingleton<IPasswordStrengthValidator, PasswordStrengthValidator>();

... so you have to write your own class that implements the interface IPasswordStrengthValidator and substitute for the above line in Startup.cs to call your class.

[ronnylam1210]

@LSNicholls I'll try this, thanks for your reply!

[LSNicholls]

@ronnylam1210 actually it may be easier than that, if all you want to do is make some changes according to the abilities of the default PasswordStrengthValidator class. Have a look at https://github.com/serenity-is/common-features/blob/master/src/Serenity.Extensions/Modules/Membership/MembershipSettings.cs. If you just need to tweak those settings, you just change appsettings.json and you're done, right?

Sorry, I didn't think of that earlier!

[ronnylam1210]

@LSNicholls Yes, it seems that modifying MembershipSettings can achieve the function I want, but this is in Serenity.Extensions. How should I modify or create a new setting file to achieve customized rules? Thanks for your reply!

[LSNicholls]

How should I modify or create a new setting file to achieve customized rules?

you don't have to create a new file. You just need to put a Membership section into appsettings.json, as I said. Right? for example:

,
  "Membership": {
    "MinPasswordLength": 20
  }

... use the MembershipSettings.cs file to understand what you can put in that section.

[ronnylam1210]

When I put custom membership rules in appsettings, it worked!
But after clicking change password, a blank alert popped up on the screen, and the password was not successfully changed...any idea?

[LSNicholls]

.any idea?

@ronnylam1210 , yes. Thank you for providing the error information. It seems that your answer is right there.

Did you comment out the line that sets up the default PasswordStrengthValidator in Startup.cs, in preparation for adding one of your own, and then forget to un-comment it when you settled on the approach that only needs you to put a Membership section in appsettings.json?

[ronnylam1210]

@LSNicholls The function can be used normally, thanks you for your help!!