mirror of https://github.com/Squidex/squidex.git
Sebastian
5 years ago
19 changed files with 83 additions and 135 deletions
@ -1,55 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex UG (haftungsbeschraenkt)
|
|
||||
// All rights reserved. Licensed under the MIT license.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using System; |
|
||||
using System.Threading.Tasks; |
|
||||
using Microsoft.AspNetCore.Identity; |
|
||||
using SharpPwned.NET; |
|
||||
using Squidex.Infrastructure.Translations; |
|
||||
using Squidex.Log; |
|
||||
|
|
||||
namespace Squidex.Domain.Users |
|
||||
{ |
|
||||
public sealed class PwnedPasswordValidator : IPasswordValidator<IdentityUser> |
|
||||
{ |
|
||||
private readonly HaveIBeenPwnedRestClient client = new HaveIBeenPwnedRestClient(); |
|
||||
private readonly ISemanticLog log; |
|
||||
|
|
||||
public PwnedPasswordValidator(ISemanticLog log) |
|
||||
{ |
|
||||
this.log = log; |
|
||||
} |
|
||||
|
|
||||
public async Task<IdentityResult> ValidateAsync(UserManager<IdentityUser> manager, IdentityUser user, string password) |
|
||||
{ |
|
||||
if (string.IsNullOrWhiteSpace(password)) |
|
||||
{ |
|
||||
return IdentityResult.Success; |
|
||||
} |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
var isBreached = await client.IsPasswordPwned(password); |
|
||||
|
|
||||
if (isBreached) |
|
||||
{ |
|
||||
var errorText = T.Get("security.passwordStolen"); |
|
||||
|
|
||||
return IdentityResult.Failed(new IdentityError { Code = "PwnedError", Description = errorText }); |
|
||||
} |
|
||||
} |
|
||||
catch (Exception ex) |
|
||||
{ |
|
||||
log.LogError(ex, w => w |
|
||||
.WriteProperty("operation", "CheckPasswordPwned") |
|
||||
.WriteProperty("status", "Failed")); |
|
||||
} |
|
||||
|
|
||||
return IdentityResult.Success; |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
Loading…
Reference in new issue