├── samples
    ├── PwnedPasswords.Sample
    │   ├── wwwroot
    │   │   ├── js
    │   │   │   ├── site.min.js
    │   │   │   └── site.js
    │   │   ├── favicon.ico
    │   │   ├── lib
    │   │   │   ├── bootstrap
    │   │   │   │   ├── dist
    │   │   │   │   │   ├── fonts
    │   │   │   │   │   │   ├── glyphicons-halflings-regular.eot
    │   │   │   │   │   │   ├── glyphicons-halflings-regular.ttf
    │   │   │   │   │   │   ├── glyphicons-halflings-regular.woff
    │   │   │   │   │   │   └── glyphicons-halflings-regular.woff2
    │   │   │   │   │   └── js
    │   │   │   │   │   │   └── npm.js
    │   │   │   │   ├── .bower.json
    │   │   │   │   └── LICENSE
    │   │   │   ├── jquery-validation-unobtrusive
    │   │   │   │   ├── .bower.json
    │   │   │   │   ├── LICENSE.txt
    │   │   │   │   └── jquery.validate.unobtrusive.min.js
    │   │   │   ├── jquery
    │   │   │   │   ├── .bower.json
    │   │   │   │   └── LICENSE.txt
    │   │   │   └── jquery-validation
    │   │   │   │   ├── .bower.json
    │   │   │   │   └── LICENSE.md
    │   │   ├── css
    │   │   │   ├── site.min.css
    │   │   │   └── site.css
    │   │   └── images
    │   │   │   ├── banner2.svg
    │   │   │   └── banner1.svg
    │   ├── Pages
    │   │   ├── _ViewStart.cshtml
    │   │   ├── Privacy.cshtml
    │   │   ├── About.cshtml
    │   │   ├── _ViewImports.cshtml
    │   │   ├── Privacy.cshtml.cs
    │   │   ├── Index.cshtml.cs
    │   │   ├── Contact.cshtml.cs
    │   │   ├── About.cshtml.cs
    │   │   ├── Contact.cshtml
    │   │   ├── Error.cshtml.cs
    │   │   ├── Error.cshtml
    │   │   ├── Shared
    │   │   │   ├── _LoginPartial.cshtml
    │   │   │   ├── _ValidationScriptsPartial.cshtml
    │   │   │   ├── _CookieConsentPartial.cshtml
    │   │   │   └── _Layout.cshtml
    │   │   └── Index.cshtml
    │   ├── Areas
    │   │   └── Identity
    │   │   │   └── Pages
    │   │   │       └── _ViewStart.cshtml
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   ├── Data
    │   │   ├── ApplicationDbContext.cs
    │   │   └── Migrations
    │   │   │   ├── ApplicationDbContextModelSnapshot.cs
    │   │   │   └── 00000000000000_CreateIdentitySchema.Designer.cs
    │   ├── Program.cs
    │   ├── PwnedPasswords.Sample.csproj
    │   ├── Properties
    │   │   └── launchSettings.json
    │   └── Startup.cs
    └── PwnedPasswords.Sample.NetCore3
    │   ├── Pages
    │       ├── _ViewStart.cshtml
    │       ├── Privacy.cshtml
    │       ├── Shared
    │       │   ├── _ValidationScriptsPartial.cshtml
    │       │   ├── _LoginPartial.cshtml
    │       │   └── _Layout.cshtml
    │       ├── _ViewImports.cshtml
    │       ├── Index.cshtml
    │       ├── Index.cshtml.cs
    │       ├── Privacy.cshtml.cs
    │       ├── Error.cshtml
    │       └── Error.cshtml.cs
    │   ├── Areas
    │       └── Identity
    │       │   └── Pages
    │       │       └── _ViewStart.cshtml
    │   ├── app.db
    │   ├── wwwroot
    │       ├── favicon.ico
    │       ├── js
    │       │   └── site.js
    │       ├── lib
    │       │   ├── jquery-validation-unobtrusive
    │       │   │   ├── LICENSE.txt
    │       │   │   └── jquery.validate.unobtrusive.min.js
    │       │   ├── jquery-validation
    │       │   │   └── LICENSE.md
    │       │   ├── bootstrap
    │       │   │   ├── LICENSE
    │       │   │   └── dist
    │       │   │   │   └── css
    │       │   │   │       ├── bootstrap-reboot.min.css
    │       │   │   │       └── bootstrap-reboot.css
    │       │   └── jquery
    │       │   │   └── LICENSE.txt
    │       └── css
    │       │   └── site.css
    │   ├── appsettings.Development.json
    │   ├── appsettings.json
    │   ├── Data
    │       ├── ApplicationDbContext.cs
    │       └── Migrations
    │       │   └── 00000000000000_CreateIdentitySchema.cs
    │   ├── CustomErrorDescriber.cs
    │   ├── Properties
    │       └── launchSettings.json
    │   ├── Program.cs
    │   ├── PwnedPasswords.Sample.NetCore3.csproj
    │   └── Startup.cs
├── logo.png
├── version.props
├── CHANGELOG.md
├── .vscode
    ├── tasks.json
    └── launch.json
├── src
    ├── PwnedPasswords.Validator
    │   ├── PwnedPasswordValidatorOptions.cs
    │   ├── PwnedPasswordErrorDescriber.cs
    │   ├── PwnedPasswords.Validator.csproj
    │   ├── PwnedPasswordValidator.cs
    │   └── IdentityBuilderExtensions.cs
    └── PwnedPasswords.Client
    │   ├── PwnedPasswordClientOptions.cs
    │   ├── IPwnedPasswordsClient.cs
    │   ├── SHA1Util.cs
    │   ├── PwnedPasswords.Client.csproj
    │   └── PwnedPasswordsClient.cs
├── releasenotes.props
├── appveyor.yml
├── test
    ├── PwnedPasswords.Validator.Test
    │   ├── Shared
    │   │   ├── TestUserRole.cs
    │   │   ├── TestUserClaim.cs
    │   │   ├── TestUserToken.cs
    │   │   ├── TestUserLogin.cs
    │   │   ├── IdentityResultAssert.cs
    │   │   ├── TestUser.cs
    │   │   └── MockHelpers.cs
    │   ├── PwnedPasswords.Validator.Test.csproj
    │   └── PwnedPasswordValidatorTests.cs
    └── PwnedPasswords.Client.Test
    │   ├── PwnedPasswords.Client.Test.csproj
    │   ├── MockHelpers.cs
    │   └── HaveIBeenPwnedClientTests.cs
├── LICENSE
├── Directory.Build.props
├── .gitattributes
├── .gitignore
├── PwnedPasswords.sln
└── README.md


/samples/PwnedPasswords.Sample/wwwroot/js/site.min.js:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/logo.png


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "_Layout";
3 | }
4 | 


--------------------------------------------------------------------------------
/version.props:
--------------------------------------------------------------------------------
1 | <Project>
2 |   <PropertyGroup>
3 |     <VersionPrefix>1.2.0</VersionPrefix>
4 |   </PropertyGroup>
5 | </Project>


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Areas/Identity/Pages/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "/Pages/Shared/_Layout.cshtml";
3 | }
4 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Areas/Identity/Pages/_ViewStart.cshtml:
--------------------------------------------------------------------------------
1 | @{
2 |     Layout = "/Pages/Shared/_Layout.cshtml";
3 | }
4 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/app.db:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample.NetCore3/app.db


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample.NetCore3/wwwroot/favicon.ico


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Privacy.cshtml:
--------------------------------------------------------------------------------
1 | @page
2 | @model PrivacyModel
3 | @{
4 |     ViewData["Title"] = "Privacy Policy";
5 | }
6 | <h2>@ViewData["Title"]</h2>
7 | 
8 | <p>Use this page to detail your site's privacy policy.</p>


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Privacy.cshtml:
--------------------------------------------------------------------------------
1 | @page
2 | @model PrivacyModel
3 | @{
4 |     ViewData["Title"] = "Privacy Policy";
5 | }
6 | <h1>@ViewData["Title"]</h1>
7 | 
8 | <p>Use this page to detail your site's privacy policy.</p>
9 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Debug",
 5 |       "System": "Information",
 6 |       "Microsoft": "Information"
 7 |     }
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.eot:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.eot


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.ttf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.ttf


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.woff:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.woff


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/andrewlock/PwnedPasswords/HEAD/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/fonts/glyphicons-halflings-regular.woff2


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
1 | <script src="~/lib/jquery-validation/dist/jquery.validate.min.js"></script>
2 | <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"></script>
3 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/About.cshtml:
--------------------------------------------------------------------------------
 1 | @page
 2 | @model AboutModel
 3 | @{
 4 |     ViewData["Title"] = "About";
 5 | }
 6 | <h2>@ViewData["Title"]</h2>
 7 | <h3>@Model.Message</h3>
 8 | 
 9 | <p>Use this area to provide additional information.</p>
10 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using Microsoft.AspNetCore.Identity
2 | @using PwnedPasswords.Sample
3 | @using PwnedPasswords.Sample.Data
4 | @namespace PwnedPasswords.Sample.Pages
5 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
6 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your Javascript code.
5 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/js/site.js:
--------------------------------------------------------------------------------
1 | // Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
2 | // for details on configuring this project to bundle and minify static web assets.
3 | 
4 | // Write your Javascript code.
5 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/_ViewImports.cshtml:
--------------------------------------------------------------------------------
1 | @using Microsoft.AspNetCore.Identity
2 | @using PwnedPasswords.Sample.NetCore3
3 | @using PwnedPasswords.Sample.NetCore3.Data
4 | @namespace PwnedPasswords.Sample.NetCore3.Pages
5 | @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
6 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/css/site.min.css:
--------------------------------------------------------------------------------
1 | body{padding-top:50px;padding-bottom:20px}.body-content{padding-left:15px;padding-right:15px}.carousel-caption p{font-size:20px;line-height:1.4}.carousel-inner .item img[src$=".svg"]{width:100%}#qrCode{margin:15px}@media screen and (max-width:767px){.carousel-caption{display:none}}


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @page
 2 | @model IndexModel
 3 | @{
 4 |     ViewData["Title"] = "Home page";
 5 | }
 6 | 
 7 | <div class="text-center">
 8 |     <h1 class="display-4">Welcome</h1>
 9 |     <p>Learn about <a href="https://docs.microsoft.com/aspnet/core">building Web apps with ASP.NET Core</a>.</p>
10 | </div>
11 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "ConnectionStrings": {
 3 |     "DefaultConnection": "DataSource=app.db"
 4 |   },
 5 |   "Logging": {
 6 |     "LogLevel": {
 7 |       "Default": "Information",
 8 |       "Microsoft": "Warning",
 9 |       "Microsoft.Hosting.Lifetime": "Information"
10 |     }
11 |   },
12 |   "AllowedHosts": "*"
13 | }
14 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "ConnectionStrings": {
 3 |     "DefaultConnection": "Server=(localdb)\\mssqllocaldb;Database=aspnet-PwnedPasswords.Sample-53bc9b9d-9d6a-45d4-8429-2a2761773502;Trusted_Connection=True;MultipleActiveResultSets=true"
 4 |   },
 5 |   "Logging": {
 6 |     "LogLevel": {
 7 |       "Default": "Warning"
 8 |     }
 9 |   },
10 |   "AllowedHosts": "*"
11 | }
12 | 


--------------------------------------------------------------------------------
/CHANGELOG.md:
--------------------------------------------------------------------------------
 1 | # Changelog
 2 | 
 3 | ## [1.2.0]
 4 | 
 5 | Features:
 6 | 
 7 | * Add support for ASP.NET Core 3.0
 8 | * Add support for [localising the PwnedPassword error message](https://github.com/andrewlock/PwnedPasswords#customizing-error-messages) in Identity Validator #18, #17 (thanks [@richtea](https://github.com/richtea)))
 9 | 
10 | [v1.2.0]: https://github.com/andrewlock/NetEscapades.AspNetCore.SecurityHeaders/compare/v1.2.0...1.1.0


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Privacy.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using Microsoft.AspNetCore.Mvc.RazorPages;
 7 | 
 8 | namespace PwnedPasswords.Sample.Pages
 9 | {
10 |     public class PrivacyModel : PageModel
11 |     {
12 |         public void OnGet()
13 |         {
14 |         }
15 |     }
16 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Index.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using Microsoft.AspNetCore.Mvc.RazorPages;
 7 | 
 8 | namespace PwnedPasswords.Sample.Pages
 9 | {
10 |     public class IndexModel : PageModel
11 |     {
12 |         public void OnGet()
13 |         {
14 | 
15 |         }
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/.vscode/tasks.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "version": "0.1.0",
 3 |     "command": "dotnet",
 4 |     "isShellCommand": true,
 5 |     "args": [],
 6 |     "tasks": [
 7 |         {
 8 |             "taskName": "build",
 9 |             "args": [
10 |                 "${workspaceRoot}/samples/CommonPasswordsValidator.Sample/CommonPasswordsValidator.Sample.csproj"
11 |             ],
12 |             "isBuildCommand": true,
13 |             "problemMatcher": "$msCompile"
14 |         }
15 |     ]
16 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Contact.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Mvc.RazorPages;
 6 | 
 7 | namespace PwnedPasswords.Sample.Pages
 8 | {
 9 |     public class ContactModel : PageModel
10 |     {
11 |         public string Message { get; set; }
12 | 
13 |         public void OnGet()
14 |         {
15 |             Message = "Your contact page.";
16 |         }
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/About.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Mvc.RazorPages;
 6 | 
 7 | namespace PwnedPasswords.Sample.Pages
 8 | {
 9 |     public class AboutModel : PageModel
10 |     {
11 |         public string Message { get; set; }
12 | 
13 |         public void OnGet()
14 |         {
15 |             Message = "Your application description page.";
16 |         }
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Data/ApplicationDbContext.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Text;
 4 | using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
 5 | using Microsoft.EntityFrameworkCore;
 6 | 
 7 | namespace PwnedPasswords.Sample.Data
 8 | {
 9 |     public class ApplicationDbContext : IdentityDbContext
10 |     {
11 |         public ApplicationDbContext(DbContextOptions<ApplicationDbContext> options)
12 |             : base(options)
13 |         {
14 |         }
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Data/ApplicationDbContext.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Text;
 4 | using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
 5 | using Microsoft.EntityFrameworkCore;
 6 | 
 7 | namespace PwnedPasswords.Sample.NetCore3.Data
 8 | {
 9 |     public class ApplicationDbContext : IdentityDbContext
10 |     {
11 |         public ApplicationDbContext(DbContextOptions<ApplicationDbContext> options)
12 |             : base(options)
13 |         {
14 |         }
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/src/PwnedPasswords.Validator/PwnedPasswordValidatorOptions.cs:
--------------------------------------------------------------------------------
 1 | namespace PwnedPasswords.Validator
 2 | {
 3 |     /// <summary>
 4 |     /// Options for configuring the <see cref="PwnedPasswordValidator{TUser}"/>
 5 |     /// </summary>
 6 |     public class PwnedPasswordValidatorOptions
 7 |     {
 8 |         /// <summary>
 9 |         /// The error message to display when a breached password is used.
10 |         /// </summary>
11 |         public string ErrorMessage { get; set; } = "The password you chose has appeared in a data breach.";
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/releasenotes.props:
--------------------------------------------------------------------------------
 1 | <Project>
 2 |   <PropertyGroup>
 3 |     <PackageReleaseNotes Condition="'$(VersionPrefix)' == '1.2.0'">
 4 |       <![CDATA[
 5 | 
 6 | Features:
 7 | 
 8 | * Add support for ASP.NET Core 3.0
 9 | * Add support for localising the PwnedPassword Validator error message #18, #17 thanks @richtea
10 | 
11 | ]]>
12 |     </PackageReleaseNotes>
13 |      <PackageReleaseNotes>$(PackageReleaseNotes)
14 | See $(PackageProjectUrl)/blob/master/CHANGELOG.md#v$(VersionPrefix.Replace('.','')) for more details.</PackageReleaseNotes>
15 |   </PropertyGroup>
16 | </Project>


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/dist/js/npm.js:
--------------------------------------------------------------------------------
 1 | // This file is autogenerated via the `commonjs` Grunt task. You can require() this file in a CommonJS environment.
 2 | require('../../js/transition.js')
 3 | require('../../js/alert.js')
 4 | require('../../js/button.js')
 5 | require('../../js/carousel.js')
 6 | require('../../js/collapse.js')
 7 | require('../../js/dropdown.js')
 8 | require('../../js/modal.js')
 9 | require('../../js/tooltip.js')
10 | require('../../js/popover.js')
11 | require('../../js/scrollspy.js')
12 | require('../../js/tab.js')
13 | require('../../js/affix.js')


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Contact.cshtml:
--------------------------------------------------------------------------------
 1 | @page
 2 | @model ContactModel
 3 | @{
 4 |     ViewData["Title"] = "Contact";
 5 | }
 6 | <h2>@ViewData["Title"]</h2>
 7 | <h3>@Model.Message</h3>
 8 | 
 9 | <address>
10 |     One Microsoft Way<br />
11 |     Redmond, WA 98052-6399<br />
12 |     <abbr title="Phone">P:</abbr>
13 |     425.555.0100
14 | </address>
15 | 
16 | <address>
17 |     <strong>Support:</strong> <a href="mailto:Support@example.com">Support@example.com</a><br />
18 |     <strong>Marketing:</strong> <a href="mailto:Marketing@example.com">Marketing@example.com</a>
19 | </address>
20 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery-validation-unobtrusive/.bower.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "jquery-validation-unobtrusive",
 3 |   "homepage": "https://github.com/aspnet/jquery-validation-unobtrusive",
 4 |   "version": "3.2.9",
 5 |   "_release": "3.2.9",
 6 |   "_resolution": {
 7 |     "type": "version",
 8 |     "tag": "v3.2.9",
 9 |     "commit": "a91f5401898e125f10771c5f5f0909d8c4c82396"
10 |   },
11 |   "_source": "https://github.com/aspnet/jquery-validation-unobtrusive.git",
12 |   "_target": "^3.2.9",
13 |   "_originalSource": "jquery-validation-unobtrusive",
14 |   "_direct": true
15 | }


--------------------------------------------------------------------------------
/src/PwnedPasswords.Client/PwnedPasswordClientOptions.cs:
--------------------------------------------------------------------------------
 1 | namespace PwnedPasswords.Client
 2 | {
 3 |     /// <summary>
 4 |     /// Options for configuring the <see cref="IPwnedPasswordsClient"/>
 5 |     /// </summary>
 6 |     public class PwnedPasswordsClientOptions
 7 |     {
 8 |         /// <summary>
 9 |         /// The minimum frequency to consider a password to be Pwned.
10 |         /// For example, setting this to 20 means only PwnedPasswords seen 20 times
11 |         /// or more will be considered Pwned. Defaults to 1 (so all pwned passwords are considered)
12 |         /// </summary>
13 |         public int MinimumFrequencyToConsiderPwned { get; set; } = 1;
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Index.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using Microsoft.AspNetCore.Mvc.RazorPages;
 7 | using Microsoft.Extensions.Logging;
 8 | 
 9 | namespace PwnedPasswords.Sample.NetCore3.Pages
10 | {
11 |     public class IndexModel : PageModel
12 |     {
13 |         private readonly ILogger<IndexModel> _logger;
14 | 
15 |         public IndexModel(ILogger<IndexModel> logger)
16 |         {
17 |             _logger = logger;
18 |         }
19 | 
20 |         public void OnGet()
21 |         {
22 | 
23 |         }
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Privacy.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using Microsoft.AspNetCore.Mvc.RazorPages;
 7 | using Microsoft.Extensions.Logging;
 8 | 
 9 | namespace PwnedPasswords.Sample.NetCore3.Pages
10 | {
11 |     public class PrivacyModel : PageModel
12 |     {
13 |         private readonly ILogger<PrivacyModel> _logger;
14 | 
15 |         public PrivacyModel(ILogger<PrivacyModel> logger)
16 |         {
17 |             _logger = logger;
18 |         }
19 | 
20 |         public void OnGet()
21 |         {
22 |         }
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/jquery-validation-unobtrusive/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright (c) .NET Foundation. All rights reserved.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 4 | these files except in compliance with the License. You may obtain a copy of the
 5 | License at
 6 | 
 7 | http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software distributed
10 | under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
11 | CONDITIONS OF ANY KIND, either express or implied. See the License for the
12 | specific language governing permissions and limitations under the License.
13 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery/.bower.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "jquery",
 3 |   "main": "dist/jquery.js",
 4 |   "license": "MIT",
 5 |   "ignore": [
 6 |     "package.json"
 7 |   ],
 8 |   "keywords": [
 9 |     "jquery",
10 |     "javascript",
11 |     "browser",
12 |     "library"
13 |   ],
14 |   "homepage": "https://github.com/jquery/jquery-dist",
15 |   "version": "3.3.1",
16 |   "_release": "3.3.1",
17 |   "_resolution": {
18 |     "type": "version",
19 |     "tag": "3.3.1",
20 |     "commit": "9e8ec3d10fad04748176144f108d7355662ae75e"
21 |   },
22 |   "_source": "https://github.com/jquery/jquery-dist.git",
23 |   "_target": "^3.3.1",
24 |   "_originalSource": "jquery",
25 |   "_direct": true
26 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/CustomErrorDescriber.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Identity;
 6 | using PwnedPasswords.Validator;
 7 | 
 8 | namespace PwnedPasswords.Sample.NetCore3
 9 | {
10 |     public class CustomErrorDescriber : PwnedPasswordErrorDescriber
11 |     {
12 |         public override IdentityError PwnedPassword()
13 |         {
14 |             return new IdentityError
15 |             {
16 |                 Code = nameof(PwnedPassword),
17 |                 Description = "The password you entered has appeared in a data breach. Please choose a different password."
18 |             };
19 |         }
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Program.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.IO;
 4 | using System.Linq;
 5 | using System.Threading.Tasks;
 6 | using Microsoft.AspNetCore;
 7 | using Microsoft.AspNetCore.Hosting;
 8 | using Microsoft.Extensions.Configuration;
 9 | using Microsoft.Extensions.Logging;
10 | 
11 | namespace PwnedPasswords.Sample
12 | {
13 |     public class Program
14 |     {
15 |         public static void Main(string[] args)
16 |         {
17 |             CreateWebHostBuilder(args).Build().Run();
18 |         }
19 | 
20 |         public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
21 |             WebHost.CreateDefaultBuilder(args)
22 |                 .UseStartup<Startup>();
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Error.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Diagnostics;
 4 | using System.Linq;
 5 | using System.Threading.Tasks;
 6 | using Microsoft.AspNetCore.Mvc;
 7 | using Microsoft.AspNetCore.Mvc.RazorPages;
 8 | 
 9 | namespace PwnedPasswords.Sample.Pages
10 | {
11 |     public class ErrorModel : PageModel
12 |     {
13 |         public string RequestId { get; set; }
14 | 
15 |         public bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
16 | 
17 |         [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
18 |         public void OnGet()
19 |         {
20 |             RequestId = Activity.Current?.Id ?? HttpContext.TraceIdentifier;
21 |         }
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/PwnedPasswords.Client/IPwnedPasswordsClient.cs:
--------------------------------------------------------------------------------
 1 | using System.Threading;
 2 | using System.Threading.Tasks;
 3 | 
 4 | namespace PwnedPasswords.Client
 5 | {
 6 |     /// <summary>
 7 |     /// A client for communicating with Troy Hunt's HaveIBeenPwned API
 8 |     /// </summary>
 9 |     public interface IPwnedPasswordsClient
10 |     {
11 |         /// <summary>
12 |         /// Checks if a provided password has appeared in a known data breach
13 |         /// </summary>
14 |         /// <param name="password">The password to check</param>
15 |         /// <param name="cancellationToken">An optional cancellation token</param>
16 |         /// <returns></returns>
17 |         Task<bool> HasPasswordBeenPwned(string password, CancellationToken cancellationToken = default);
18 |     }
19 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/PwnedPasswords.Sample.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp2.1</TargetFramework>
 5 |     <UserSecretsId>aspnet-PwnedPassports.Sample-42A7DBE1-C066-49F4-9610-9DBA8F50EDC6</UserSecretsId>
 6 |   </PropertyGroup>
 7 | 
 8 |   <ItemGroup>
 9 |     <PackageReference Include="Microsoft.AspNetCore.App" />
10 |     <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="2.1.0" PrivateAssets="All" />
11 |     <PackageReference Include="Microsoft.Extensions.Http.Polly" Version="2.1.0" />
12 |   </ItemGroup>
13 | 
14 |   <ItemGroup>
15 |     <ProjectReference Include="..\..\src\PwnedPasswords.Validator\PwnedPasswords.Validator.csproj" />
16 |   </ItemGroup>
17 | 
18 | </Project>
19 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:50684",
 7 |       "sslPort": 44393
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "PwnedPasswords.Sample": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false, 
 4 |     "anonymousAuthentication": true, 
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:26499",
 7 |       "sslPort": 44315
 8 |     }
 9 |   },
10 |   "profiles": {
11 |     "IIS Express": {
12 |       "commandName": "IISExpress",
13 |       "launchBrowser": true,
14 |       "environmentVariables": {
15 |         "ASPNETCORE_ENVIRONMENT": "Development"
16 |       }
17 |     },
18 |     "PwnedPasswords.Sample.NetCore3": {
19 |       "commandName": "Project",
20 |       "launchBrowser": true,
21 |       "applicationUrl": "https://localhost:5001;http://localhost:5000",
22 |       "environmentVariables": {
23 |         "ASPNETCORE_ENVIRONMENT": "Development"
24 |       }
25 |     }
26 |   }
27 | }
28 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Program.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Hosting;
 6 | using Microsoft.Extensions.Configuration;
 7 | using Microsoft.Extensions.Hosting;
 8 | using Microsoft.Extensions.Logging;
 9 | 
10 | namespace PwnedPasswords.Sample.NetCore3
11 | {
12 |     public class Program
13 |     {
14 |         public static void Main(string[] args)
15 |         {
16 |             CreateHostBuilder(args).Build().Run();
17 |         }
18 | 
19 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
20 |             Host.CreateDefaultBuilder(args)
21 |                 .ConfigureWebHostDefaults(webBuilder =>
22 |                 {
23 |                     webBuilder.UseStartup<Startup>();
24 |                 });
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/appveyor.yml:
--------------------------------------------------------------------------------
 1 | version: '{build}'
 2 | image: Visual Studio 2019
 3 | pull_requests:
 4 |   do_not_increment_build_number: true
 5 | branches:
 6 |   only:
 7 |   - master
 8 | clone_depth: 1
 9 | nuget:
10 |   disable_publish_on_pr: true
11 | build_script:
12 | - ps: .\Build.ps1
13 | test: off
14 | artifacts:
15 | - path: .\artifacts\**\*.nupkg
16 |   name: NuGet
17 | - path: .\artifacts\**\*.xml
18 |   name: xUnit Test Results
19 | deploy:
20 | - provider: NuGet
21 |   server: https://www.myget.org/F/andrewlock-ci/api/v2/package
22 |   api_key:
23 |     secure: 7XbdNq38u0JLRNc9pRl35WPi5LZopfYcoCslf7Er/eTreR5mZnGbmY/lVQYcgxI2
24 |   skip_symbols: true
25 |   on:
26 |     branch: master
27 | - provider: NuGet
28 |   name: production
29 |   api_key:
30 |     secure: nyE3SEqDxSkHrLGAQJBMh2Oo6deEnWCEKoHCVafYuUB7NwjOUwDi3jXQItElcp2h
31 |   on:
32 |     branch: master
33 |     appveyor_repo_tag: true


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Error.cshtml:
--------------------------------------------------------------------------------
 1 | @page
 2 | @model ErrorModel
 3 | @{
 4 |     ViewData["Title"] = "Error";
 5 | }
 6 | 
 7 | <h1 class="text-danger">Error.</h1>
 8 | <h2 class="text-danger">An error occurred while processing your request.</h2>
 9 | 
10 | @if (Model.ShowRequestId)
11 | {
12 |     <p>
13 |         <strong>Request ID:</strong> <code>@Model.RequestId</code>
14 |     </p>
15 | }
16 | 
17 | <h3>Development Mode</h3>
18 | <p>
19 |     Swapping to <strong>Development</strong> environment will display more detailed information about the error that occurred.
20 | </p>
21 | <p>
22 |     <strong>Development environment should not be enabled in deployed applications</strong>, as it can result in sensitive information from exceptions being displayed to end users. For local debugging, development environment can be enabled by setting the <strong>ASPNETCORE_ENVIRONMENT</strong> environment variable to <strong>Development</strong>, and restarting the application.
23 | </p>
24 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Error.cshtml:
--------------------------------------------------------------------------------
 1 | @page
 2 | @model ErrorModel
 3 | @{
 4 |     ViewData["Title"] = "Error";
 5 | }
 6 | 
 7 | <h1 class="text-danger">Error.</h1>
 8 | <h2 class="text-danger">An error occurred while processing your request.</h2>
 9 | 
10 | @if (Model.ShowRequestId)
11 | {
12 |     <p>
13 |         <strong>Request ID:</strong> <code>@Model.RequestId</code>
14 |     </p>
15 | }
16 | 
17 | <h3>Development Mode</h3>
18 | <p>
19 |     Swapping to the <strong>Development</strong> environment displays detailed information about the error that occurred.
20 | </p>
21 | <p>
22 |     <strong>The Development environment shouldn't be enabled for deployed applications.</strong>
23 |     It can result in displaying sensitive information from exceptions to end users.
24 |     For local debugging, enable the <strong>Development</strong> environment by setting the <strong>ASPNETCORE_ENVIRONMENT</strong> environment variable to <strong>Development</strong>
25 |     and restarting the app.
26 | </p>
27 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Error.cshtml.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Diagnostics;
 4 | using System.Linq;
 5 | using System.Threading.Tasks;
 6 | using Microsoft.AspNetCore.Mvc;
 7 | using Microsoft.AspNetCore.Mvc.RazorPages;
 8 | using Microsoft.Extensions.Logging;
 9 | 
10 | namespace PwnedPasswords.Sample.NetCore3.Pages
11 | {
12 |     [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
13 |     public class ErrorModel : PageModel
14 |     {
15 |         public string RequestId { get; set; }
16 | 
17 |         public bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
18 | 
19 |         private readonly ILogger<ErrorModel> _logger;
20 | 
21 |         public ErrorModel(ILogger<ErrorModel> logger)
22 |         {
23 |             _logger = logger;
24 |         }
25 | 
26 |         public void OnGet()
27 |         {
28 |             RequestId = Activity.Current?.Id ?? HttpContext.TraceIdentifier;
29 |         }
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification 
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | body {
 4 |     padding-top: 50px;
 5 |     padding-bottom: 20px;
 6 | }
 7 | 
 8 | /* Wrapping element */
 9 | /* Set some basic padding to keep content from hitting the edges */
10 | .body-content {
11 |     padding-left: 15px;
12 |     padding-right: 15px;
13 | }
14 | 
15 | /* Carousel */
16 | .carousel-caption p {
17 |     font-size: 20px;
18 |     line-height: 1.4;
19 | }
20 | 
21 | /* Make .svg files in the carousel display properly in older browsers */
22 | .carousel-inner .item img[src$=".svg"] {
23 |     width: 100%;
24 | }
25 | 
26 | /* QR code generator */
27 | #qrCode {
28 |     margin: 15px;
29 | }
30 | 
31 | /* Hide/rearrange for smaller screens */
32 | @media screen and (max-width: 767px) {
33 |     /* Hide captions */
34 |     .carousel-caption {
35 |         display: none;
36 |     }
37 | }
38 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/TestUserRole.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) .NET Foundation. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
 3 | 
 4 | using System;
 5 | 
 6 | namespace Microsoft.AspNetCore.Identity.Test
 7 | {
 8 |     /// <summary>
 9 |     ///     EntityType that represents a user belonging to a role
10 |     /// </summary>
11 |     public class TestUserRole : TestUserRole<string> { }
12 | 
13 |     /// <summary>
14 |     ///     EntityType that represents a user belonging to a role
15 |     /// </summary>
16 |     /// <typeparam name="TKey"></typeparam>
17 |     public class TestUserRole<TKey> where TKey : IEquatable<TKey>
18 |     {
19 |         /// <summary>
20 |         ///     UserId for the user that is in the role
21 |         /// </summary>
22 |         public virtual TKey UserId { get; set; }
23 | 
24 |         /// <summary>
25 |         ///     RoleId for the role
26 |         /// </summary>
27 |         public virtual TKey RoleId { get; set; }
28 |     }
29 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Shared/_LoginPartial.cshtml:
--------------------------------------------------------------------------------
 1 | @using Microsoft.AspNetCore.Identity
 2 | 
 3 | @inject SignInManager<IdentityUser> SignInManager
 4 | @inject UserManager<IdentityUser> UserManager
 5 | 
 6 | @if (SignInManager.IsSignedIn(User))
 7 | {
 8 |     <form asp-area="Identity" asp-page="/Account/Logout" asp-route-returnUrl="@Url.Page("/Index", new { area = "" })" method="post" id="logoutForm" class="navbar-right">
 9 |         <ul class="nav navbar-nav navbar-right">
10 |             <li>
11 |                 <a asp-area="Identity" asp-page="/Account/Manage/Index" title="Manage">Hello @UserManager.GetUserName(User)!</a>
12 |             </li>
13 |             <li>
14 |                 <button type="submit" class="btn btn-link navbar-btn navbar-link">Logout</button>
15 |             </li>
16 |         </ul>
17 |     </form>
18 | }
19 | else
20 | {
21 |     <ul class="nav navbar-nav navbar-right">
22 |         <li><a asp-area="Identity" asp-page="/Account/Register">Register</a></li>
23 |         <li><a asp-area="Identity" asp-page="/Account/Login">Login</a></li>
24 |     </ul>
25 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Shared/_LoginPartial.cshtml:
--------------------------------------------------------------------------------
 1 | @using Microsoft.AspNetCore.Identity
 2 | @inject SignInManager<IdentityUser> SignInManager
 3 | @inject UserManager<IdentityUser> UserManager
 4 | 
 5 | <ul class="navbar-nav">
 6 | @if (SignInManager.IsSignedIn(User))
 7 | {
 8 |     <li class="nav-item">
 9 |         <a  class="nav-link text-dark" asp-area="Identity" asp-page="/Account/Manage/Index" title="Manage">Hello @User.Identity.Name!</a>
10 |     </li>
11 |     <li class="nav-item">
12 |         <form class="form-inline" asp-area="Identity" asp-page="/Account/Logout" asp-route-returnUrl="@Url.Page("/", new { area = "" })" method="post" >
13 |             <button  type="submit" class="nav-link btn btn-link text-dark">Logout</button>
14 |         </form>
15 |     </li>
16 | }
17 | else
18 | {
19 |     <li class="nav-item">
20 |         <a class="nav-link text-dark" asp-area="Identity" asp-page="/Account/Register">Register</a>
21 |     </li>
22 |     <li class="nav-item">
23 |         <a class="nav-link text-dark" asp-area="Identity" asp-page="/Account/Login">Login</a>
24 |     </li>
25 | }
26 | </ul>
27 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery-validation/.bower.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "jquery-validation",
 3 |   "homepage": "https://jqueryvalidation.org/",
 4 |   "repository": {
 5 |     "type": "git",
 6 |     "url": "git://github.com/jquery-validation/jquery-validation.git"
 7 |   },
 8 |   "authors": [
 9 |     "Jörn Zaefferer <joern.zaefferer@gmail.com>"
10 |   ],
11 |   "description": "Form validation made easy",
12 |   "main": "dist/jquery.validate.js",
13 |   "keywords": [
14 |     "forms",
15 |     "validation",
16 |     "validate"
17 |   ],
18 |   "license": "MIT",
19 |   "ignore": [
20 |     "**/.*",
21 |     "node_modules",
22 |     "bower_components",
23 |     "test",
24 |     "demo",
25 |     "lib"
26 |   ],
27 |   "dependencies": {
28 |     "jquery": ">= 1.7.2"
29 |   },
30 |   "version": "1.17.0",
31 |   "_release": "1.17.0",
32 |   "_resolution": {
33 |     "type": "version",
34 |     "tag": "1.17.0",
35 |     "commit": "fc9b12d3bfaa2d0c04605855b896edb2934c0772"
36 |   },
37 |   "_source": "https://github.com/jzaefferer/jquery-validation.git",
38 |   "_target": "^1.17.0",
39 |   "_originalSource": "jquery-validation",
40 |   "_direct": true
41 | }


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2016 andrewlock
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/.bower.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "bootstrap",
 3 |   "description": "The most popular front-end framework for developing responsive, mobile first projects on the web.",
 4 |   "keywords": [
 5 |     "css",
 6 |     "js",
 7 |     "less",
 8 |     "mobile-first",
 9 |     "responsive",
10 |     "front-end",
11 |     "framework",
12 |     "web"
13 |   ],
14 |   "homepage": "http://getbootstrap.com",
15 |   "license": "MIT",
16 |   "moduleType": "globals",
17 |   "main": [
18 |     "less/bootstrap.less",
19 |     "dist/js/bootstrap.js"
20 |   ],
21 |   "ignore": [
22 |     "/.*",
23 |     "_config.yml",
24 |     "CNAME",
25 |     "composer.json",
26 |     "CONTRIBUTING.md",
27 |     "docs",
28 |     "js/tests",
29 |     "test-infra"
30 |   ],
31 |   "dependencies": {
32 |     "jquery": "1.9.1 - 3"
33 |   },
34 |   "version": "3.3.7",
35 |   "_release": "3.3.7",
36 |   "_resolution": {
37 |     "type": "version",
38 |     "tag": "v3.3.7",
39 |     "commit": "0b9c4a4007c44201dce9a6cc1a38407005c26c86"
40 |   },
41 |   "_source": "https://github.com/twbs/bootstrap.git",
42 |   "_target": "v3.3.7",
43 |   "_originalSource": "bootstrap",
44 |   "_direct": true
45 | }


--------------------------------------------------------------------------------
/test/PwnedPasswords.Client.Test/PwnedPasswords.Client.Test.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFrameworks>netcoreapp2.1;netcoreapp3.0</TargetFrameworks>
 5 | 
 6 |     <IsPackable>false</IsPackable>
 7 |   </PropertyGroup>
 8 | 
 9 |   <ItemGroup>
10 |     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.7.0" />
11 |     <PackageReference Include="Moq" Version="4.8.2" />
12 |     <PackageReference Include="xunit" Version="2.3.1" />
13 |     <PackageReference Include="xunit.runner.visualstudio" Version="2.3.1" />
14 |     <DotNetCliToolReference Include="dotnet-xunit" Version="2.3.1" />
15 |   </ItemGroup>
16 | 
17 |   <ItemGroup Condition="'$(TargetFramework)' != 'netcoreapp3.0'">
18 |     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="2.1.0" />
19 |   </ItemGroup>
20 | 
21 |   <ItemGroup Condition="'$(TargetFramework)' == 'netcoreapp3.0'">
22 |     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="3.0.0" />
23 |   </ItemGroup>
24 | 
25 |   <ItemGroup>
26 |     <ProjectReference Include="..\..\src\PwnedPasswords.Client\PwnedPasswords.Client.csproj" />
27 |   </ItemGroup>
28 | 
29 | </Project>
30 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2016 Twitter, Inc.
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in
13 | all copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
21 | THE SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/PwnedPasswords.Sample.NetCore3.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFramework>netcoreapp3.0</TargetFramework>
 5 |     <UserSecretsId>aspnet-PwnedPasswords.Sample.NetCore3-DE04683B-028A-473F-9BF8-F7709BC71669</UserSecretsId>
 6 |   </PropertyGroup>
 7 | 
 8 | 
 9 |   <ItemGroup>
10 |     <None Update="app.db" CopyToOutputDirectory="PreserveNewest" />
11 |   </ItemGroup>
12 | 
13 |   <ItemGroup>
14 |     <PackageReference Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="3.0.0" />
15 |     <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="3.0.0" />
16 |     <PackageReference Include="Microsoft.AspNetCore.Identity.UI" Version="3.0.0" />
17 |     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="3.0.0" />
18 |     <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="3.0.0" />
19 |     <PackageReference Include="Microsoft.Extensions.Http.Polly" Version="3.0.0" />
20 |   </ItemGroup>
21 | 
22 |   <ItemGroup>
23 |     <ProjectReference Include="..\..\src\PwnedPasswords.Validator\PwnedPasswords.Validator.csproj" />
24 |   </ItemGroup>
25 | 
26 | </Project>
27 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/jquery-validation/LICENSE.md:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | =====================
 3 | 
 4 | Copyright Jörn Zaefferer
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/bootstrap/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2011-2018 Twitter, Inc.
 4 | Copyright (c) 2011-2018 The Bootstrap Authors
 5 | 
 6 | Permission is hereby granted, free of charge, to any person obtaining a copy
 7 | of this software and associated documentation files (the "Software"), to deal
 8 | in the Software without restriction, including without limitation the rights
 9 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | copies of the Software, and to permit persons to whom the Software is
11 | furnished to do so, subject to the following conditions:
12 | 
13 | The above copyright notice and this permission notice shall be included in
14 | all copies or substantial portions of the Software.
15 | 
16 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | THE SOFTWARE.
23 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Shared/_ValidationScriptsPartial.cshtml:
--------------------------------------------------------------------------------
 1 | <environment include="Development">
 2 |     <script src="~/lib/jquery-validation/dist/jquery.validate.js"></script>
 3 |     <script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.js"></script>
 4 | </environment>
 5 | <environment exclude="Development">
 6 |     <script src="https://ajax.aspnetcdn.com/ajax/jquery.validate/1.17.0/jquery.validate.min.js"
 7 |             asp-fallback-src="~/lib/jquery-validation/dist/jquery.validate.min.js"
 8 |             asp-fallback-test="window.jQuery && window.jQuery.validator"
 9 |             crossorigin="anonymous"
10 |             integrity="sha384-rZfj/ogBloos6wzLGpPkkOr/gpkBNLZ6b6yLy4o+ok+t/SAKlL5mvXLr0OXNi1Hp">
11 |     </script>
12 |     <script src="https://ajax.aspnetcdn.com/ajax/jquery.validation.unobtrusive/3.2.9/jquery.validate.unobtrusive.min.js"
13 |             asp-fallback-src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js"
14 |             asp-fallback-test="window.jQuery && window.jQuery.validator && window.jQuery.validator.unobtrusive"
15 |             crossorigin="anonymous"
16 |             integrity="sha384-ifv0TYDWxBHzvAk2Z0n8R434FL1Rlv/Av18DXE43N/1rvHyOG4izKst0f2iSLdds">
17 |     </script>
18 | </environment>
19 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/TestUserClaim.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) .NET Foundation. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
 3 | 
 4 | using System;
 5 | 
 6 | namespace Microsoft.AspNetCore.Identity.Test
 7 | {
 8 |     /// <summary>
 9 |     ///     EntityType that represents one specific user claim
10 |     /// </summary>
11 |     public class TestUserClaim : TestUserClaim<string> { }
12 | 
13 |     /// <summary>
14 |     ///     EntityType that represents one specific user claim
15 |     /// </summary>
16 |     /// <typeparam name="TKey"></typeparam>
17 |     public class TestUserClaim<TKey> where TKey : IEquatable<TKey>
18 |     {
19 |         /// <summary>
20 |         ///     Primary key
21 |         /// </summary>
22 |         public virtual int Id { get; set; }
23 | 
24 |         /// <summary>
25 |         ///     User Id for the user who owns this claim
26 |         /// </summary>
27 |         public virtual TKey UserId { get; set; }
28 | 
29 |         /// <summary>
30 |         ///     Claim type
31 |         /// </summary>
32 |         public virtual string ClaimType { get; set; }
33 | 
34 |         /// <summary>
35 |         ///     Claim value
36 |         /// </summary>
37 |         public virtual string ClaimValue { get; set; }
38 |     }
39 | }


--------------------------------------------------------------------------------
/Directory.Build.props:
--------------------------------------------------------------------------------
 1 | <Project>
 2 | 
 3 |   <Import Project="version.props" />
 4 | 
 5 |   <PropertyGroup>
 6 |     <Authors>Andrew Lock</Authors>
 7 |     <Copyright>Copyright © AndrewLock</Copyright>
 8 |     <NeutralLanguage>en-GB</NeutralLanguage>
 9 |     <PackageRequireLicenseAcceptance>false</PackageRequireLicenseAcceptance>
10 |     <PackageProjectUrl>https://github.com/andrewlock/PwnedPasswords</PackageProjectUrl>
11 |     <PackageIcon>logo.png</PackageIcon>
12 |     <PackageLicenseExpression>MIT</PackageLicenseExpression>
13 |     <RepositoryType>git</RepositoryType>
14 |     <RepositoryUrl>https://github.com/andrewlock/PwnedPasswords</RepositoryUrl>
15 |     <DebugType>embedded</DebugType>
16 |     <PublishRepositoryUrl>true</PublishRepositoryUrl>
17 |     <EmbedUntrackedSources>true</EmbedUntrackedSources>
18 |     <AllowedOutputExtensionsInPackageBuildOutputFolder>$(AllowedOutputExtensionsInPackageBuildOutputFolder);.pdb</AllowedOutputExtensionsInPackageBuildOutputFolder>
19 |   </PropertyGroup>
20 | 
21 |   <PropertyGroup>
22 |     <IsPackable>false</IsPackable>
23 |     <WarnOnPackingNonPackableProject>false</WarnOnPackingNonPackableProject>
24 |     <LangVersion>7.3</LangVersion>
25 |   </PropertyGroup>
26 | 
27 |   <ItemGroup>
28 |     <None Include="..\..\logo.png" Pack="true" PackagePath="" />
29 |   </ItemGroup>
30 | 
31 |   <Import Project="releasenotes.props" />
32 | 
33 | </Project>


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/TestUserToken.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) .NET Foundation. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
 3 | 
 4 | using System;
 5 | 
 6 | namespace Microsoft.AspNetCore.Identity.Test
 7 | {
 8 |     /// <summary>
 9 |     /// Entity type for a user's token
10 |     /// </summary>
11 |     public class TestUserToken : TestUserToken<string> { }
12 | 
13 |     /// <summary>
14 |     /// Entity type for a user's token
15 |     /// </summary>
16 |     /// <typeparam name="TKey"></typeparam>
17 |     public class TestUserToken<TKey> where TKey : IEquatable<TKey>
18 |     {
19 |         /// <summary>
20 |         ///     The login provider for the login (i.e. facebook, google)
21 |         /// </summary>
22 |         public virtual string LoginProvider { get; set; }
23 | 
24 |         /// <summary>
25 |         ///     Key representing the login for the provider
26 |         /// </summary>
27 |         public virtual string TokenName { get; set; }
28 | 
29 |         /// <summary>
30 |         ///     Display name for the login
31 |         /// </summary>
32 |         public virtual string TokenValue { get; set; }
33 | 
34 |         /// <summary>
35 |         ///     User Id for the user who owns this login
36 |         /// </summary>
37 |         public virtual TKey UserId { get; set; }
38 |     }
39 | }


--------------------------------------------------------------------------------
/src/PwnedPasswords.Client/SHA1Util.cs:
--------------------------------------------------------------------------------
 1 | using System.Security.Cryptography;
 2 | using System.Text;
 3 | 
 4 | namespace PwnedPasswords.Client
 5 | {
 6 |     /// <summary>
 7 |     /// Utilities for generating a SHA1 hash
 8 |     /// </summary>
 9 |     internal static class SHA1Util
10 |     {
11 |         private static readonly SHA1 _sha1 = SHA1.Create();
12 | 
13 |         /// <summary>
14 |         /// Compute hash for string
15 |         /// </summary>
16 |         /// <param name="s">String to be hashed</param>
17 |         /// <returns>40-character hex string</returns>
18 |         public static string SHA1HashStringForUTF8String(string s)
19 |         {
20 |             byte[] bytes = Encoding.Default.GetBytes(s);
21 | 
22 |             byte[] hashBytes = _sha1.ComputeHash(bytes);
23 | 
24 |             return HexStringFromBytes(hashBytes);
25 |         }
26 | 
27 |         /// <summary>
28 |         /// Convert an array of bytes to a string of hex digits
29 |         /// </summary>
30 |         /// <param name="bytes">array of bytes</param>
31 |         /// <returns>String of hex digits</returns>
32 |         private static string HexStringFromBytes(byte[] bytes)
33 |         {
34 |             var sb = new StringBuilder();
35 |             foreach (byte b in bytes)
36 |             {
37 |                 var hex = b.ToString("X2");
38 |                 sb.Append(hex);
39 |             }
40 |             return sb.ToString();
41 |         }
42 |     }
43 | }
44 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/PwnedPasswords.Validator.Test.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFrameworks>netcoreapp2.0;netcoreapp3.0</TargetFrameworks>
 5 |     <IsPackable>false</IsPackable>
 6 |   </PropertyGroup>
 7 | 
 8 |   <ItemGroup>
 9 |     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.3.0" />
10 |     <PackageReference Include="Moq" Version="4.7.99" />
11 |     <PackageReference Include="xunit" Version="2.2.0" />
12 |     <PackageReference Include="xunit.runner.visualstudio" Version="2.2.0" />
13 |   </ItemGroup>
14 | 
15 |   <ItemGroup>
16 |     <ProjectReference Include="..\..\src\PwnedPasswords.Validator\PwnedPasswords.Validator.csproj" />
17 |   </ItemGroup>
18 | 
19 |   <ItemGroup Condition="'$(TargetFramework)' != 'netcoreapp3.0'">
20 |     <PackageReference Include="Microsoft.AspNetCore.Hosting" Version="2.0.0" />
21 |     <PackageReference Include="Microsoft.Extensions.FileProviders.Physical" Version="2.0.0" />
22 |   </ItemGroup>
23 | 
24 |   <ItemGroup Condition="'$(TargetFramework)' == 'netcoreapp3.0'">
25 |     <FrameworkReference Include="Microsoft.AspNetCore.App" />
26 |     <PackageReference Include="Microsoft.Extensions.FileProviders.Physical" Version="3.0.0" />
27 |   </ItemGroup>
28 | 
29 |   <ItemGroup>
30 |     <None Update="pwned-passwords-update-2.txt">
31 |       <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
32 |     </None>
33 |   </ItemGroup>
34 | 
35 | </Project>
36 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/TestUserLogin.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) .NET Foundation. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
 3 | 
 4 | using System;
 5 | 
 6 | namespace Microsoft.AspNetCore.Identity.Test
 7 | {
 8 |     /// <summary>
 9 |     ///     Entity type for a user's login (i.e. facebook, google)
10 |     /// </summary>
11 |     public class TestUserLogin : TestUserLogin<string> { }
12 | 
13 |     /// <summary>
14 |     ///     Entity type for a user's login (i.e. facebook, google)
15 |     /// </summary>
16 |     /// <typeparam name="TKey"></typeparam>
17 |     public class TestUserLogin<TKey> where TKey : IEquatable<TKey>
18 |     {
19 |         /// <summary>
20 |         ///     The login provider for the login (i.e. facebook, google)
21 |         /// </summary>
22 |         public virtual string LoginProvider { get; set; }
23 | 
24 |         /// <summary>
25 |         ///     Key representing the login for the provider
26 |         /// </summary>
27 |         public virtual string ProviderKey { get; set; }
28 | 
29 |         /// <summary>
30 |         ///     Display name for the login
31 |         /// </summary>
32 |         public virtual string ProviderDisplayName { get; set; }
33 | 
34 |         /// <summary>
35 |         ///     User Id for the user who owns this login
36 |         /// </summary>
37 |         public virtual TKey UserId { get; set; }
38 |     }
39 | }


--------------------------------------------------------------------------------
/src/PwnedPasswords.Validator/PwnedPasswordErrorDescriber.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Identity;
 2 | using Microsoft.Extensions.Options;
 3 | 
 4 | namespace PwnedPasswords.Validator
 5 | {
 6 |     /// <summary>
 7 |     /// Service to enable localization for application facing validation errors.
 8 |     /// </summary>
 9 |     /// <remarks>
10 |     /// These errors are returned to controllers and are generally used as display messages to end users.
11 |     /// </remarks>
12 |     public class PwnedPasswordErrorDescriber
13 |     {
14 |         private readonly PwnedPasswordValidatorOptions _options;
15 | 
16 |         /// <summary>
17 |         /// Initializes a new instance of the <see cref="PwnedPasswordErrorDescriber"/> class.
18 |         /// </summary>
19 |         /// <param name="options">The validator options.</param>
20 |         public PwnedPasswordErrorDescriber(IOptions<PwnedPasswordValidatorOptions> options = null)
21 |         {
22 |             _options = options?.Value;
23 |         }
24 | 
25 |         /// <summary>
26 |         /// Returns an <see cref="IdentityError"/> indicating a pwned password was identified.
27 |         /// </summary>
28 |         /// <returns>An <see cref="IdentityError"/> indicating a pwned password was identified.</returns>
29 |         public virtual IdentityError PwnedPassword()
30 |         {
31 |             return new IdentityError
32 |             {
33 |                 Code = nameof(PwnedPassword),
34 |                 Description = _options?.ErrorMessage
35 |             };
36 |         }
37 |     }
38 | }


--------------------------------------------------------------------------------
/src/PwnedPasswords.Validator/PwnedPasswords.Validator.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFrameworks>netstandard2.0;netcoreapp3.0</TargetFrameworks>
 5 |     <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
 6 |     <GenerateDocumentationFile>true</GenerateDocumentationFile>
 7 |     <IsPackable>true</IsPackable>
 8 |   </PropertyGroup>
 9 |   
10 |   <PropertyGroup>
11 |     <Description>An Implementation of ASP.NET Core Identity IPasswordValidator that verifies the provided password has not been pwned, as defined by Troy Hunt's HaveIBeenPwned service: https://haveibeenpwned.com/Passwords</Description>
12 |     <AssemblyName>PwnedPasswords.Validator</AssemblyName>
13 |     <PackageId>PwnedPasswords.Validator</PackageId>
14 |     <PackageTags>aspnetcore;password;validation;validator;identity;membership;haveibeenwned;pwned passwords</PackageTags>
15 |   </PropertyGroup>
16 | 
17 |   <ItemGroup>
18 |     <PackageReference Include="Microsoft.SourceLink.GitHub" Version="1.0.0-beta-63127-02" PrivateAssets="all" />
19 |   </ItemGroup>
20 | 
21 |   <ItemGroup Condition="'$(TargetFramework)' != 'netcoreapp3.0'">
22 |     <PackageReference Include="Microsoft.AspNetCore.Identity" Version="2.1.0" />
23 |   </ItemGroup>
24 | 
25 |   <ItemGroup Condition="'$(TargetFramework)' == 'netcoreapp3.0'">
26 |     <FrameworkReference Include="Microsoft.AspNetCore.App" />
27 |   </ItemGroup>
28 | 
29 |   <ItemGroup>
30 |     <ProjectReference Include="..\PwnedPasswords.Client\PwnedPasswords.Client.csproj" />
31 |   </ItemGroup>
32 | 
33 | </Project>
34 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/css/site.css:
--------------------------------------------------------------------------------
 1 | /* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
 2 | for details on configuring this project to bundle and minify static web assets. */
 3 | 
 4 | a.navbar-brand {
 5 |   white-space: normal;
 6 |   text-align: center;
 7 |   word-break: break-all;
 8 | }
 9 | 
10 | /* Provide sufficient contrast against white background */
11 | a {
12 |   color: #0366d6;
13 | }
14 | 
15 | .btn-primary {
16 |   color: #fff;
17 |   background-color: #1b6ec2;
18 |   border-color: #1861ac;
19 | }
20 | 
21 | .nav-pills .nav-link.active, .nav-pills .show > .nav-link {
22 |   color: #fff;
23 |   background-color: #1b6ec2;
24 |   border-color: #1861ac;
25 | }
26 | 
27 | /* Sticky footer styles
28 | -------------------------------------------------- */
29 | html {
30 |   font-size: 14px;
31 | }
32 | @media (min-width: 768px) {
33 |   html {
34 |     font-size: 16px;
35 |   }
36 | }
37 | 
38 | .border-top {
39 |   border-top: 1px solid #e5e5e5;
40 | }
41 | .border-bottom {
42 |   border-bottom: 1px solid #e5e5e5;
43 | }
44 | 
45 | .box-shadow {
46 |   box-shadow: 0 .25rem .75rem rgba(0, 0, 0, .05);
47 | }
48 | 
49 | button.accept-policy {
50 |   font-size: 1rem;
51 |   line-height: inherit;
52 | }
53 | 
54 | /* Sticky footer styles
55 | -------------------------------------------------- */
56 | html {
57 |   position: relative;
58 |   min-height: 100%;
59 | }
60 | 
61 | body {
62 |   /* Margin bottom by footer height */
63 |   margin-bottom: 60px;
64 | }
65 | .footer {
66 |   position: absolute;
67 |   bottom: 0;
68 |   width: 100%;
69 |   white-space: nowrap;
70 |   line-height: 60px; /* Vertically center the text there */
71 | }
72 | 


--------------------------------------------------------------------------------
/src/PwnedPasswords.Client/PwnedPasswords.Client.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk">
 2 | 
 3 |   <PropertyGroup>
 4 |     <TargetFrameworks>netstandard2.0;netcoreapp3.0</TargetFrameworks>
 5 |     <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
 6 |     <GenerateDocumentationFile>true</GenerateDocumentationFile>
 7 |     <IsPackable>true</IsPackable>
 8 |   </PropertyGroup>
 9 |   
10 |   <PropertyGroup>
11 |     <Description>A typed HttpClient for use with Troy Hunt's HaveIBeenPwned Pwned Passwords service: https://haveibeenpwned.com/Passwords</Description>
12 |     <AssemblyName>PwnedPasswords.Client</AssemblyName>
13 |     <PackageId>PwnedPasswords.Client</PackageId>
14 |     <PackageTags>aspnetcore;httpclient;httpclientfactory;haveibeenwned;pwned passwords</PackageTags>
15 |   </PropertyGroup>
16 | 
17 |   <ItemGroup>
18 |     <PackageReference Include="Microsoft.SourceLink.GitHub" Version="1.0.0-beta-63127-02" PrivateAssets="all" />
19 |   </ItemGroup>
20 |   
21 |   <ItemGroup Condition="'$(TargetFramework)' != 'netcoreapp3.0'">
22 |     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="2.1.0" />
23 |     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="2.1.0" />
24 |     <PackageReference Include="Microsoft.Extensions.Http" Version="2.1.0" />
25 |   </ItemGroup>
26 | 
27 |   <ItemGroup Condition="'$(TargetFramework)' == 'netcoreapp3.0'">
28 |     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="3.0.0" />
29 |     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="3.0.0" />
30 |     <PackageReference Include="Microsoft.Extensions.Http" Version="3.0.0" />
31 |   </ItemGroup>
32 | 
33 | </Project>
34 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/jquery/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | Copyright JS Foundation and other contributors, https://js.foundation/
 2 | 
 3 | This software consists of voluntary contributions made by many
 4 | individuals. For exact contribution history, see the revision history
 5 | available at https://github.com/jquery/jquery
 6 | 
 7 | The following license applies to all parts of this software except as
 8 | documented below:
 9 | 
10 | ====
11 | 
12 | Permission is hereby granted, free of charge, to any person obtaining
13 | a copy of this software and associated documentation files (the
14 | "Software"), to deal in the Software without restriction, including
15 | without limitation the rights to use, copy, modify, merge, publish,
16 | distribute, sublicense, and/or sell copies of the Software, and to
17 | permit persons to whom the Software is furnished to do so, subject to
18 | the following conditions:
19 | 
20 | The above copyright notice and this permission notice shall be
21 | included in all copies or substantial portions of the Software.
22 | 
23 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
27 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
28 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
29 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 | 
31 | ====
32 | 
33 | All files located in the node_modules and external directories are
34 | externally maintained libraries used by this software which have their
35 | own licenses; we recommend you read them, as their terms may differ from
36 | the terms above.
37 | 


--------------------------------------------------------------------------------
/.vscode/launch.json:
--------------------------------------------------------------------------------
 1 | {
 2 |    // Use IntelliSense to find out which attributes exist for C# debugging
 3 |    // Use hover for the description of the existing attributes
 4 |    // For further information visit https://github.com/OmniSharp/omnisharp-vscode/blob/master/debugger-launchjson.md
 5 |    "version": "0.2.0",
 6 |    "configurations": [
 7 |         {
 8 |             "name": ".NET Core Launch (web)",
 9 |             "type": "coreclr",
10 |             "request": "launch",
11 |             "preLaunchTask": "build",
12 |             // If you have changed target frameworks, make sure to update the program path.
13 |             "program": "${workspaceRoot}/samples/CommonPasswordsValidator.Sample/bin/Debug/netcoreapp2.0/CommonPasswordsValidator.Sample.dll",
14 |             "args": [],
15 |             "cwd": "${workspaceRoot}/samples/CommonPasswordsValidator.Sample",
16 |             "stopAtEntry": false,
17 |             "internalConsoleOptions": "openOnSessionStart",
18 |             "launchBrowser": {
19 |                 "enabled": true,
20 |                 "args": "${auto-detect-url}",
21 |                 "windows": {
22 |                     "command": "cmd.exe",
23 |                     "args": "/C start ${auto-detect-url}"
24 |                 },
25 |                 "osx": {
26 |                     "command": "open"
27 |                 },
28 |                 "linux": {
29 |                     "command": "xdg-open"
30 |                 }
31 |             },
32 |             "env": {
33 |                 "ASPNETCORE_ENVIRONMENT": "Development"
34 |             },
35 |             "sourceFileMap": {
36 |                 "/Views": "${workspaceRoot}/Views"
37 |             }
38 |         },
39 |         {
40 |             "name": ".NET Core Attach",
41 |             "type": "coreclr",
42 |             "request": "attach",
43 |             "processId": "${command:pickProcess}"
44 |         }
45 |     ]
46 | }


--------------------------------------------------------------------------------
/src/PwnedPasswords.Validator/PwnedPasswordValidator.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Threading.Tasks;
 3 | using Microsoft.AspNetCore.Identity;
 4 | using PwnedPasswords.Client;
 5 | 
 6 | namespace PwnedPasswords.Validator
 7 | {
 8 |     /// <summary>
 9 |     /// An <see cref="IPasswordValidator{TUser}"/> for verifying a given password has not appeared in a data breach
10 |     /// </summary>
11 |     /// <typeparam name="TUser"></typeparam>
12 |     public class PwnedPasswordValidator<TUser> : IPasswordValidator<TUser>
13 |         where TUser : class
14 |     {
15 |         private readonly IPwnedPasswordsClient _client;
16 | 
17 |         /// <summary>
18 |         /// Create a new instance of the <see cref="PwnedPasswordValidator{TUser}"/>
19 |         /// </summary>
20 |         public PwnedPasswordValidator(IPwnedPasswordsClient client, PwnedPasswordErrorDescriber describer)
21 |         {
22 |             _client = client ?? throw new ArgumentNullException(nameof(client));
23 |             Describer = describer ?? throw new ArgumentNullException(nameof(describer));
24 |         }
25 | 
26 |         /// <summary>
27 |         /// Gets the <see cref="PwnedPasswordErrorDescriber"/> used to supply error text.
28 |         /// </summary>
29 |         /// <value>
30 |         /// The <see cref="PwnedPasswordErrorDescriber"/> used to supply error text.
31 |         /// </value>
32 |         public PwnedPasswordErrorDescriber Describer { get; }
33 | 
34 |         /// <inheritdoc />
35 |         public async Task<IdentityResult> ValidateAsync(UserManager<TUser> manager, TUser user, string password)
36 |         {
37 |             var isPwned = false;
38 |             if (!string.IsNullOrEmpty(password))
39 |             {
40 |                 isPwned = await _client.HasPasswordBeenPwned(password);
41 |             }
42 | 
43 |             var result = isPwned
44 |                 ? IdentityResult.Failed(Describer.PwnedPassword())
45 |                 : IdentityResult.Success;
46 | 
47 |             return result;
48 |         }
49 |     }
50 | }
51 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Shared/_CookieConsentPartial.cshtml:
--------------------------------------------------------------------------------
 1 | @using Microsoft.AspNetCore.Http.Features
 2 | 
 3 | @{
 4 |     var consentFeature = Context.Features.Get<ITrackingConsentFeature>();
 5 |     var showBanner = !consentFeature?.CanTrack ?? false;
 6 |     var cookieString = consentFeature?.CreateConsentCookie();
 7 | }
 8 | 
 9 | @if (showBanner)
10 | {
11 |     <nav id="cookieConsent" class="navbar navbar-default navbar-fixed-top" role="alert">
12 |         <div class="container">
13 |             <div class="navbar-header">
14 |                 <button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#cookieConsent .navbar-collapse">
15 |                     <span class="sr-only">Toggle cookie consent banner</span>
16 |                     <span class="icon-bar"></span>
17 |                     <span class="icon-bar"></span>
18 |                     <span class="icon-bar"></span>
19 |                 </button>
20 |                 <span class="navbar-brand"><span class="glyphicon glyphicon-info-sign" aria-hidden="true"></span></span>
21 |             </div>
22 |             <div class="collapse navbar-collapse">
23 |                 <p class="navbar-text">
24 |                     Use this space to summarize your privacy and cookie use policy.
25 |                 </p>
26 |                 <div class="navbar-right">
27 |                     <a asp-page="/Privacy" class="btn btn-info navbar-btn">Learn More</a>
28 |                     <button type="button" class="btn btn-default navbar-btn" data-cookie-string="@cookieString">Accept</button>
29 |                 </div>
30 |             </div>
31 |         </div>
32 |     </nav>
33 |     <script>
34 |         (function () {
35 |             document.querySelector("#cookieConsent button[data-cookie-string]").addEventListener("click", function (el) {
36 |                 document.cookie = el.target.dataset.cookieString;
37 |                 document.querySelector("#cookieConsent").classList.add("hidden");
38 |             }, false);
39 |         })();
40 |     </script>
41 | }


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/IdentityResultAssert.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) .NET Foundation. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
 3 | 
 4 | using System.Linq;
 5 | using Microsoft.AspNetCore.Identity;
 6 | using Microsoft.Extensions.Logging;
 7 | using Xunit;
 8 | 
 9 | namespace Microsoft.AspNetCore.Identity.Test
10 | {
11 |     /// <summary>
12 |     /// Helper for tests to validate identity results.
13 |     /// </summary>
14 |     public static class IdentityResultAssert
15 |     {
16 |         /// <summary>
17 |         /// Asserts that the result has Succeeded.
18 |         /// </summary>
19 |         /// <param name="result"></param>
20 |         public static void IsSuccess(IdentityResult result)
21 |         {
22 |             Assert.NotNull(result);
23 |             Assert.True(result.Succeeded);
24 |         }
25 | 
26 |         /// <summary>
27 |         /// Asserts that the result has not Succeeded.
28 |         /// </summary>
29 |         public static void IsFailure(IdentityResult result)
30 |         {
31 |             Assert.NotNull(result);
32 |             Assert.False(result.Succeeded);
33 |         }
34 | 
35 |         /// <summary>
36 |         /// Asserts that the result has not Succeeded and that error is the first Error's Description.
37 |         /// </summary>
38 |         public static void IsFailure(IdentityResult result, string error)
39 |         {
40 |             Assert.NotNull(result);
41 |             Assert.False(result.Succeeded);
42 |             Assert.Equal(error, result.Errors.First().Description);
43 |         }
44 | 
45 |         /// <summary>
46 |         /// Asserts that the result has not Succeeded and that first error matches error's code and Description.
47 |         /// </summary>
48 |         public static void IsFailure(IdentityResult result, IdentityError error)
49 |         {
50 |             Assert.NotNull(result);
51 |             Assert.False(result.Succeeded);
52 |             Assert.Equal(error.Description, result.Errors.First().Description);
53 |             Assert.Equal(error.Code, result.Errors.First().Code);
54 |         }
55 |     }
56 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Pages/Shared/_Layout.cshtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="utf-8" />
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 6 |     <title>@ViewData["Title"] - PwnedPasswords.Sample.NetCore3</title>
 7 |     <link rel="stylesheet" href="~/lib/bootstrap/dist/css/bootstrap.min.css" />
 8 |     <link rel="stylesheet" href="~/css/site.css" />
 9 | </head>
10 | <body>
11 |     <header>
12 |         <nav class="navbar navbar-expand-sm navbar-toggleable-sm navbar-light bg-white border-bottom box-shadow mb-3">
13 |             <div class="container">
14 |                 <a class="navbar-brand" asp-area="" asp-page="/Index">PwnedPasswords.Sample.NetCore3</a>
15 |                 <button class="navbar-toggler" type="button" data-toggle="collapse" data-target=".navbar-collapse" aria-controls="navbarSupportedContent"
16 |                         aria-expanded="false" aria-label="Toggle navigation">
17 |                     <span class="navbar-toggler-icon"></span>
18 |                 </button>
19 |                 <div class="navbar-collapse collapse d-sm-inline-flex flex-sm-row-reverse">
20 |                     <partial name="_LoginPartial" />
21 |                     <ul class="navbar-nav flex-grow-1">
22 |                         <li class="nav-item">
23 |                             <a class="nav-link text-dark" asp-area="" asp-page="/Index">Home</a>
24 |                         </li>
25 |                         <li class="nav-item">
26 |                             <a class="nav-link text-dark" asp-area="" asp-page="/Privacy">Privacy</a>
27 |                         </li>
28 |                     </ul>
29 |                 </div>
30 |             </div>
31 |         </nav>
32 |     </header>
33 |     <div class="container">
34 |         <main role="main" class="pb-3">
35 |             @RenderBody()
36 |         </main>
37 |     </div>
38 | 
39 |     <footer class="border-top footer text-muted">
40 |         <div class="container">
41 |             &copy; 2019 - PwnedPasswords.Sample.NetCore3 - <a asp-area="" asp-page="/Privacy">Privacy</a>
42 |         </div>
43 |     </footer>
44 | 
45 |     <script src="~/lib/jquery/dist/jquery.min.js"></script>
46 |     <script src="~/lib/bootstrap/dist/js/bootstrap.bundle.min.js"></script>
47 |     <script src="~/js/site.js" asp-append-version="true"></script>
48 | 
49 |     @RenderSection("Scripts", required: false)
50 | </body>
51 | </html>
52 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Client.Test/MockHelpers.cs:
--------------------------------------------------------------------------------
 1 | // Copyright (c) .NET Foundation. All rights reserved.
 2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
 3 | 
 4 | using System;
 5 | using System.Text;
 6 | using Microsoft.Extensions.Logging;
 7 | using Microsoft.Extensions.Options;
 8 | using Moq;
 9 | 
10 | namespace PwnedPasswords.Client.Test
11 | {
12 |     public static class MockHelpers
13 |     {
14 |         public static StringBuilder LogMessage = new StringBuilder();
15 | 
16 |         public static Mock<ILogger<T>> MockILogger<T>(StringBuilder logStore = null) where T : class
17 |         {
18 |             logStore = logStore ?? LogMessage;
19 |             var logger = new Mock<ILogger<T>>();
20 |             logger.Setup(x => x.Log(It.IsAny<LogLevel>(), It.IsAny<EventId>(), It.IsAny<object>(),
21 |                 It.IsAny<Exception>(), It.IsAny<Func<object, Exception, string>>()))
22 |                 .Callback((LogLevel logLevel, EventId eventId, object state, Exception exception, Func<object, Exception, string> formatter) =>
23 |                 {
24 |                     if (formatter == null)
25 |                     {
26 |                         logStore.Append(state.ToString());
27 |                     }
28 |                     else
29 |                     {
30 |                         logStore.Append(formatter(state, exception));
31 |                     }
32 |                     logStore.Append(" ");
33 |                 });
34 |             logger.Setup(x => x.BeginScope(It.IsAny<object>())).Callback((object state) =>
35 |                 {
36 |                     logStore.Append(state.ToString());
37 |                     logStore.Append(" ");
38 |                 });
39 |             logger.Setup(x => x.IsEnabled(LogLevel.Debug)).Returns(true);
40 |             logger.Setup(x => x.IsEnabled(LogLevel.Warning)).Returns(true);
41 | 
42 |             return logger;
43 |         }
44 | 
45 |         public static ILogger<T> StubLogger<T>()
46 |         {
47 |             var stub = new Mock<ILogger<T>>();
48 |             return stub.Object;
49 |         }
50 | 
51 |         public static IOptions<T> Options<T>(T options) where T : class, new()
52 |         {
53 |             var stub = new Mock<IOptions<T>>();
54 |             stub.SetupGet(x => x.Value).Returns(options);
55 |             return stub.Object;
56 |         }
57 | 
58 |         public static IOptions<T> Options<T>() where T : class, new()
59 |         {
60 |             return Options(new T());
61 |         }
62 |     }
63 | }


--------------------------------------------------------------------------------
/test/PwnedPasswords.Client.Test/HaveIBeenPwnedClientTests.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.Extensions.DependencyInjection;
 2 | using System;
 3 | using System.Net.Http;
 4 | using System.Threading.Tasks;
 5 | using Xunit;
 6 | 
 7 | namespace PwnedPasswords.Client.Test
 8 | {
 9 |     public class HaveIBeenPwnedClientTests
10 |     {
11 |         [Fact, Trait("Category", "Integration")] // don't run it automatically
12 |         public async Task HasPasswordBeenPwned_WhenStrongPassword_ReturnsFalse()
13 |         {
14 |             PwnedPasswordsClient service = GetClient();
15 | 
16 |             var safePassword = "657ed4b7-954a-4777-92d7-eb887eb8025eaa43e773-9f62-42f6-b717-a15e6fef8751";
17 | 
18 |             var isPwned = await service.HasPasswordBeenPwned(safePassword);
19 | 
20 |             Assert.False(isPwned, "Checking for safe password should return false");
21 |         }
22 | 
23 |         [Fact, Trait("Category", "Integration")] // don't run it automatically
24 |         public async Task HasPasswordBeenPwned_WhenWeakPassword_ReturnsTrue()
25 |         {
26 |             PwnedPasswordsClient service = GetClient();;
27 | 
28 |             var pwnedPassword = "password";
29 | 
30 |             var isPwned = await service.HasPasswordBeenPwned(pwnedPassword);
31 | 
32 |             Assert.True(isPwned, "Checking for Pwned password should return true");
33 |         }
34 | 
35 |         [Fact, Trait("Category", "Integration")] // don't run it automatically
36 |         public async Task HasPasswordBeenPwned_WhenWeakPasswordButUnderThresholdViews_ReturnsFalse()
37 |         {
38 |             PwnedPasswordsClient service = GetClient(5000);
39 | 
40 |             var pwnedPassword = "Password1!";
41 | 
42 |             var isPwned = await service.HasPasswordBeenPwned(pwnedPassword);
43 | 
44 |             Assert.True(isPwned, "Checking for Pwned password should return true");
45 |         }
46 | 
47 |         private static PwnedPasswordsClient GetClient(int minimumFrequencyToConsiderPwned = 1)
48 |         {
49 |             var services = new ServiceCollection();
50 |             services.AddPwnedPasswordHttpClient(minimumFrequencyToConsiderPwned);
51 |             var provider = services.BuildServiceProvider();
52 | 
53 |             //all called in one method to easily enforce timout
54 | 
55 |             var service = new PwnedPasswordsClient(
56 |                 provider.GetService<IHttpClientFactory>().CreateClient(PwnedPasswordsClient.DefaultName),
57 |                 MockHelpers.StubLogger<PwnedPasswordsClient>(),
58 |                 MockHelpers.Options<PwnedPasswordsClientOptions>());
59 |             return service;
60 |         }
61 |     }
62 | }
63 | 


--------------------------------------------------------------------------------
/.gitattributes:
--------------------------------------------------------------------------------
 1 | ###############################################################################
 2 | # Set default behavior to automatically normalize line endings.
 3 | ###############################################################################
 4 | * text=auto
 5 | 
 6 | ###############################################################################
 7 | # Set default behavior for command prompt diff.
 8 | #
 9 | # This is need for earlier builds of msysgit that does not have it on by
10 | # default for csharp files.
11 | # Note: This is only used by command line
12 | ###############################################################################
13 | #*.cs     diff=csharp
14 | 
15 | ###############################################################################
16 | # Set the merge driver for project and solution files
17 | #
18 | # Merging from the command prompt will add diff markers to the files if there
19 | # are conflicts (Merging from VS is not affected by the settings below, in VS
20 | # the diff markers are never inserted). Diff markers may cause the following 
21 | # file extensions to fail to load in VS. An alternative would be to treat
22 | # these files as binary and thus will always conflict and require user
23 | # intervention with every merge. To do so, just uncomment the entries below
24 | ###############################################################################
25 | #*.sln       merge=binary
26 | #*.csproj    merge=binary
27 | #*.vbproj    merge=binary
28 | #*.vcxproj   merge=binary
29 | #*.vcproj    merge=binary
30 | #*.dbproj    merge=binary
31 | #*.fsproj    merge=binary
32 | #*.lsproj    merge=binary
33 | #*.wixproj   merge=binary
34 | #*.modelproj merge=binary
35 | #*.sqlproj   merge=binary
36 | #*.wwaproj   merge=binary
37 | 
38 | ###############################################################################
39 | # behavior for image files
40 | #
41 | # image files are treated as binary by default.
42 | ###############################################################################
43 | #*.jpg   binary
44 | #*.png   binary
45 | #*.gif   binary
46 | 
47 | ###############################################################################
48 | # diff behavior for common document formats
49 | # 
50 | # Convert binary document formats to text before diffing them. This feature
51 | # is only available from the command line. Turn it on by uncommenting the 
52 | # entries below.
53 | ###############################################################################
54 | #*.doc   diff=astextplain
55 | #*.DOC   diff=astextplain
56 | #*.docx  diff=astextplain
57 | #*.DOCX  diff=astextplain
58 | #*.dot   diff=astextplain
59 | #*.DOT   diff=astextplain
60 | #*.pdf   diff=astextplain
61 | #*.PDF   diff=astextplain
62 | #*.rtf   diff=astextplain
63 | #*.RTF   diff=astextplain
64 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Startup.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Builder;
 2 | using Microsoft.AspNetCore.Identity;
 3 | using Microsoft.AspNetCore.Hosting;
 4 | using Microsoft.AspNetCore.Http;
 5 | using Microsoft.AspNetCore.Mvc;
 6 | using Microsoft.EntityFrameworkCore;
 7 | using PwnedPasswords.Sample.Data;
 8 | using Microsoft.Extensions.Configuration;
 9 | using Microsoft.Extensions.DependencyInjection;
10 | using Polly;
11 | using System.Net.Http;
12 | using System;
13 | 
14 | namespace PwnedPasswords.Sample
15 | {
16 |     public class Startup
17 |     {
18 |         public Startup(IConfiguration configuration)
19 |         {
20 |             Configuration = configuration;
21 |         }
22 | 
23 |         public IConfiguration Configuration { get; }
24 | 
25 |         // This method gets called by the runtime. Use this method to add services to the container.
26 |         public void ConfigureServices(IServiceCollection services)
27 |         {
28 |             services.Configure<CookiePolicyOptions>(options =>
29 |             {
30 |                 // This lambda determines whether user consent for non-essential cookies is needed for a given request.
31 |                 options.CheckConsentNeeded = context => true;
32 |                 options.MinimumSameSitePolicy = SameSiteMode.None;
33 |             });
34 | 
35 |             // Explicitly configure the PwnedPassword client to timeout after 2 seconds, and retry 3 times
36 |             // The pwnedpassword API achieves 99% percentile of <1s, so this should be sufficient!
37 |             services.AddPwnedPasswordHttpClient(minimumFrequencyToConsiderPwned: 20)
38 |                   .AddTransientHttpErrorPolicy(p => p.RetryAsync(3))
39 |                   .AddPolicyHandler(Policy.TimeoutAsync<HttpResponseMessage>(TimeSpan.FromSeconds(2)));
40 | 
41 |             services.AddDbContext<ApplicationDbContext>(options =>
42 |                 options.UseSqlServer(
43 |                     Configuration.GetConnectionString("DefaultConnection")));
44 |             services.AddDefaultIdentity<IdentityUser>()
45 |                 .AddEntityFrameworkStores<ApplicationDbContext>()
46 |                 .AddPwnedPasswordValidator<IdentityUser>(opts 
47 |                     => opts.ErrorMessage = "The password is not safe!");
48 | 
49 | 
50 |             services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1);
51 |         }
52 | 
53 |         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
54 |         public void Configure(IApplicationBuilder app, IHostingEnvironment env)
55 |         {
56 |             if (env.IsDevelopment())
57 |             {
58 |                 app.UseDeveloperExceptionPage();
59 |                 app.UseDatabaseErrorPage();
60 |             }
61 |             else
62 |             {
63 |                 app.UseExceptionHandler("/Error");
64 |                 app.UseHsts();
65 |             }
66 | 
67 |             app.UseHttpsRedirection();
68 |             app.UseStaticFiles();
69 |             app.UseCookiePolicy();
70 | 
71 |             app.UseAuthentication();
72 | 
73 |             app.UseMvc();
74 |         }
75 |     }
76 | }
77 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Startup.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Collections.Generic;
 3 | using System.Linq;
 4 | using System.Threading.Tasks;
 5 | using Microsoft.AspNetCore.Builder;
 6 | using Microsoft.AspNetCore.Identity;
 7 | using Microsoft.AspNetCore.Identity.UI;
 8 | using Microsoft.AspNetCore.Hosting;
 9 | using Microsoft.AspNetCore.HttpsPolicy;
10 | using Microsoft.EntityFrameworkCore;
11 | using PwnedPasswords.Sample.NetCore3.Data;
12 | using Microsoft.Extensions.Configuration;
13 | using Microsoft.Extensions.DependencyInjection;
14 | using Microsoft.Extensions.Hosting;
15 | using Polly;
16 | using System.Net.Http;
17 | 
18 | namespace PwnedPasswords.Sample.NetCore3
19 | {
20 |     public class Startup
21 |     {
22 |         public Startup(IConfiguration configuration)
23 |         {
24 |             Configuration = configuration;
25 |         }
26 | 
27 |         public IConfiguration Configuration { get; }
28 | 
29 |         // This method gets called by the runtime. Use this method to add services to the container.
30 |         public void ConfigureServices(IServiceCollection services)
31 |         {
32 | 
33 |             // Explicitly configure the PwnedPassword client to timeout after 2 seconds, and retry 3 times
34 |             // The pwnedpassword API achieves 99% percentile of <1s, so this should be sufficient!
35 |             services.AddPwnedPasswordHttpClient(minimumFrequencyToConsiderPwned: 20)
36 |                   .AddTransientHttpErrorPolicy(p => p.RetryAsync(3))
37 |                   .AddPolicyHandler(Policy.TimeoutAsync<HttpResponseMessage>(TimeSpan.FromSeconds(2)));
38 | 
39 |             services.AddDbContext<ApplicationDbContext>(options =>
40 |                 options.UseSqlite(
41 |                     Configuration.GetConnectionString("DefaultConnection")));
42 |             services.AddDefaultIdentity<IdentityUser>(options => options.SignIn.RequireConfirmedAccount = true)
43 |                 .AddEntityFrameworkStores<ApplicationDbContext>()
44 |                 .AddPwnedPasswordValidator<IdentityUser>()
45 |                 .AddPwnedPasswordErrorDescriber<CustomErrorDescriber>();
46 |             services.AddRazorPages();
47 |         }
48 | 
49 |         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
50 |         public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
51 |         {
52 |             if (env.IsDevelopment())
53 |             {
54 |                 app.UseDeveloperExceptionPage();
55 |                 app.UseDatabaseErrorPage();
56 |             }
57 |             else
58 |             {
59 |                 app.UseExceptionHandler("/Error");
60 |                 // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
61 |                 app.UseHsts();
62 |             }
63 | 
64 |             app.UseHttpsRedirection();
65 |             app.UseStaticFiles();
66 | 
67 |             app.UseRouting();
68 | 
69 |             app.UseAuthentication();
70 |             app.UseAuthorization();
71 | 
72 |             app.UseEndpoints(endpoints =>
73 |             {
74 |                 endpoints.MapRazorPages();
75 |             });
76 |         }
77 |     }
78 | }
79 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Shared/_Layout.cshtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | <head>
 4 |     <meta charset="utf-8" />
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 6 |     <title>@ViewData["Title"] - PwnedPasswords.Sample</title>
 7 | 
 8 |     <environment include="Development">
 9 |         <link rel="stylesheet" href="~/lib/bootstrap/dist/css/bootstrap.css" />
10 |         <link rel="stylesheet" href="~/css/site.css" />
11 |     </environment>
12 |     <environment exclude="Development">
13 |         <link rel="stylesheet" href="https://ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css"
14 |               asp-fallback-href="~/lib/bootstrap/dist/css/bootstrap.min.css"
15 |               asp-fallback-test-class="sr-only" asp-fallback-test-property="position" asp-fallback-test-value="absolute" />
16 |         <link rel="stylesheet" href="~/css/site.min.css" asp-append-version="true" />
17 |     </environment>
18 | </head>
19 | <body>
20 |     <nav class="navbar navbar-inverse navbar-fixed-top">
21 |         <div class="container">
22 |             <div class="navbar-header">
23 |                 <button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
24 |                     <span class="sr-only">Toggle navigation</span>
25 |                     <span class="icon-bar"></span>
26 |                     <span class="icon-bar"></span>
27 |                     <span class="icon-bar"></span>
28 |                 </button>
29 |                 <a asp-page="/Index" class="navbar-brand">PwnedPasswords.Sample</a>
30 |             </div>
31 |             <div class="navbar-collapse collapse">
32 |                 <ul class="nav navbar-nav">
33 |                     <li><a asp-page="/Index">Home</a></li>
34 |                     <li><a asp-page="/About">About</a></li>
35 |                     <li><a asp-page="/Contact">Contact</a></li>
36 |                 </ul>
37 |                 <partial name="_LoginPartial" />
38 |             </div>
39 |         </div>
40 |     </nav>
41 | 
42 |     <partial name="_CookieConsentPartial" />
43 | 
44 |     <div class="container body-content">
45 |         @RenderBody()
46 |         <hr />
47 |         <footer>
48 |             <p>&copy; 2018 - PwnedPasswords.Sample</p>
49 |         </footer>
50 |     </div>
51 | 
52 |     <environment include="Development">
53 |         <script src="~/lib/jquery/dist/jquery.js"></script>
54 |         <script src="~/lib/bootstrap/dist/js/bootstrap.js"></script>
55 |         <script src="~/js/site.js" asp-append-version="true"></script>
56 |     </environment>
57 |     <environment exclude="Development">
58 |         <script src="https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.min.js"
59 |                 asp-fallback-src="~/lib/jquery/dist/jquery.min.js"
60 |                 asp-fallback-test="window.jQuery"
61 |                 crossorigin="anonymous"
62 |                 integrity="sha384-tsQFqpEReu7ZLhBV2VZlAu7zcOV+rXbYlF2cqB8txI/8aZajjp4Bqd+V6D5IgvKT">
63 |         </script>
64 |         <script src="https://ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js"
65 |                 asp-fallback-src="~/lib/bootstrap/dist/js/bootstrap.min.js"
66 |                 asp-fallback-test="window.jQuery && window.jQuery.fn && window.jQuery.fn.modal"
67 |                 crossorigin="anonymous"
68 |                 integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa">
69 |         </script>
70 |         <script src="~/js/site.min.js" asp-append-version="true"></script>
71 |     </environment>
72 | 
73 |     @RenderSection("Scripts", required: false)
74 | </body>
75 | </html>
76 | 


--------------------------------------------------------------------------------
/src/PwnedPasswords.Client/PwnedPasswordsClient.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.Extensions.DependencyInjection;
 2 | using Microsoft.Extensions.Logging;
 3 | using System;
 4 | using System.IO;
 5 | using System.Net.Http;
 6 | using System.Threading;
 7 | using System.Threading.Tasks;
 8 | using Microsoft.Extensions.Options;
 9 | 
10 | namespace PwnedPasswords.Client
11 | {
12 |     /// <inheritdoc />
13 |     public class PwnedPasswordsClient : IPwnedPasswordsClient
14 |     {
15 |         /// <summary>
16 |         /// The default name used to register the typed HttpClient with the <see cref="IServiceCollection"/>
17 |         /// </summary>
18 |         public const string DefaultName = "PwnedPasswordsClient";
19 | 
20 |         readonly HttpClient _client;
21 |         readonly ILogger<PwnedPasswordsClient> _logger;
22 |         readonly PwnedPasswordsClientOptions _options;
23 | 
24 |         /// <summary>
25 |         /// Create a new instance of <see cref="PwnedPasswordsClient"/>
26 |         /// </summary>
27 |         public PwnedPasswordsClient(HttpClient client, ILogger<PwnedPasswordsClient> logger, IOptions<PwnedPasswordsClientOptions> options)
28 |         {
29 |             _client = client;
30 |             _logger = logger;
31 |             _options = options.Value;
32 |         }
33 | 
34 |         /// <inheritdoc />
35 |         public async Task<bool> HasPasswordBeenPwned(string password, CancellationToken cancellationToken = default)
36 |         {
37 |             var sha1Password = SHA1Util.SHA1HashStringForUTF8String(password);
38 |             var sha1Prefix = sha1Password.Substring(0, 5);
39 |             var sha1Suffix = sha1Password.Substring(5);
40 |             try
41 |             {
42 |                 var response = await _client.GetAsync("range/" + sha1Prefix, cancellationToken);
43 | 
44 |                 if (response.IsSuccessStatusCode)
45 |                 {
46 |                     // Response was a success. Check to see if the SHA1 suffix is in the response body.
47 |                     var frequency = await Contains(response.Content, sha1Suffix);
48 |                     var isPwned = (frequency >= _options.MinimumFrequencyToConsiderPwned);
49 |                     if (isPwned)
50 |                     {
51 |                         _logger.LogDebug("HaveIBeenPwned API indicates the password has been pwned");
52 |                     }
53 |                     else
54 |                     {
55 |                         _logger.LogDebug("HaveIBeenPwned API indicates the password has not been pwned");
56 |                     }
57 |                     return isPwned;
58 |                 }
59 |                 _logger.LogWarning("Unexpected response from API: {StatusCode}", response.StatusCode);
60 |             }
61 |             catch (Exception ex)
62 |             {
63 |                 _logger.LogError(ex, "Error calling Pwned Password API. Assuming password is not pwned");
64 |             }
65 |             return false;
66 |         }
67 | 
68 |         internal static async Task<long> Contains(HttpContent content, string sha1Suffix)
69 |         {
70 |             using (var streamReader = new StreamReader(await content.ReadAsStreamAsync()))
71 |             {
72 |                 while (!streamReader.EndOfStream)
73 |                 {
74 |                     var line = await streamReader.ReadLineAsync();
75 |                     var segments = line.Split(':');
76 |                     if (segments.Length == 2
77 |                         && string.Equals(segments[0], sha1Suffix, StringComparison.OrdinalIgnoreCase)
78 |                         && long.TryParse(segments[1], out var count))
79 |                     {
80 |                         return count;
81 |                     }
82 |                 }
83 |             }
84 | 
85 |             return 0;
86 | 
87 |         }
88 |     }
89 | }
90 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.min.css:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
3 |  * Copyright 2011-2019 The Bootstrap Authors
4 |  * Copyright 2011-2019 Twitter, Inc.
5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
7 |  */*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{padding:0;border-style:none}input[type=checkbox],input[type=radio]{box-sizing:border-box;padding:0}input[type=date],input[type=datetime-local],input[type=month],input[type=time]{-webkit-appearance:listbox}textarea{overflow:auto;resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;max-width:100%;padding:0;margin-bottom:.5rem;font-size:1.5rem;line-height:inherit;color:inherit;white-space:normal}progress{vertical-align:baseline}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}output{display:inline-block}summary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}
8 | /*# sourceMappingURL=bootstrap-reboot.min.css.map */


--------------------------------------------------------------------------------
/src/PwnedPasswords.Validator/IdentityBuilderExtensions.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | using System.Linq;
 3 | using System.Net.Http;
 4 | using Microsoft.AspNetCore.Identity;
 5 | using Microsoft.Extensions.DependencyInjection.Extensions;
 6 | using PwnedPasswords.Client;
 7 | using PwnedPasswords.Validator;
 8 | 
 9 | namespace Microsoft.Extensions.DependencyInjection
10 | {
11 |     /// <summary>
12 |     /// Extensions for adding <see cref="PwnedPasswordValidator{TUser}"/> to an <see cref="IdentityBuilder"/>
13 |     /// </summary>
14 |     public static class IdentityBuilderExtensions
15 |     {
16 |         /// <summary>
17 |         /// Adds a password validator that checks the password is not a pwned password using the Have I been pwned API
18 |         /// See https://haveibeenpwned.com/API/v2#PwnedPasswords for details.
19 |         /// </summary>
20 |         /// <param name="builder">The Microsoft.AspNetCore.Identity.IdentityBuilder instance this method extends</param>
21 |         /// <typeparam name="TUser">The user type whose password will be validated.</typeparam>
22 |         /// <returns>The current Microsoft.AspNetCore.Identity.IdentityBuilder instance.</returns>
23 |         public static IdentityBuilder AddPwnedPasswordValidator<TUser>(this IdentityBuilder builder) where TUser : class
24 |         {
25 |             return builder.AddPwnedPasswordValidator<TUser>(configure: opts => { });
26 |         }
27 | 
28 |         /// <summary>
29 |         /// Adds a password validator that checks the password is not a pwned password using the Have I been pwned API
30 |         /// See https://haveibeenpwned.com/API/v2#PwnedPasswords for details.
31 |         /// </summary>
32 |         /// <param name="builder">The Microsoft.AspNetCore.Identity.IdentityBuilder instance this method extends</param>
33 |         /// <param name="configure">Configure the options for the Validator</param>
34 |         /// <typeparam name="TUser">The user type whose password will be validated.</typeparam>
35 |         /// <returns>The current <see cref="IdentityBuilder"/> instance.</returns>
36 |         public static IdentityBuilder AddPwnedPasswordValidator<TUser>(
37 |             this IdentityBuilder builder, Action<PwnedPasswordValidatorOptions> configure)
38 |             where TUser : class
39 |         {
40 |             return builder.AddPwnedPasswordValidator<TUser>(configure, configureClient: opts => { });
41 |         }
42 | 
43 |         /// <summary>
44 |         /// Adds a password validator that checks the password is not a pwned password using the Have I been pwned API
45 |         /// See https://haveibeenpwned.com/API/v2#PwnedPasswords for details.
46 |         /// </summary>
47 |         /// <param name="builder">The Microsoft.AspNetCore.Identity.IdentityBuilder instance this method extends</param>
48 |         /// <param name="configure">Configure the options for the Validator</param>
49 |         /// <param name="configureClient">A delegate that is used to configure the <see cref="PwnedPasswordsClientOptions"/></param>
50 |         /// <typeparam name="TUser">The user type whose password will be validated.</typeparam>
51 |         /// <returns>The current <see cref="IdentityBuilder"/> instance.</returns>
52 |         public static IdentityBuilder AddPwnedPasswordValidator<TUser>(
53 |             this IdentityBuilder builder, Action<PwnedPasswordValidatorOptions> configure,
54 |             Action<PwnedPasswordsClientOptions> configureClient)
55 |             where TUser : class
56 |         {
57 |             if (!builder.Services.Any(x => x.ServiceType == typeof(IPwnedPasswordsClient)))
58 |             {
59 |                 builder.Services.AddPwnedPasswordHttpClient();
60 |             }
61 |             builder.Services.Configure(configure);
62 |             builder.Services.Configure(configureClient);
63 |             builder.Services.TryAddScoped<PwnedPasswordErrorDescriber>();
64 |             return builder.AddPasswordValidator<PwnedPasswordValidator<TUser>>();
65 |         }
66 | 
67 |         /// <summary>
68 |         /// Adds a <see cref="PwnedPasswordErrorDescriber"/>
69 |         /// </summary>
70 |         /// <typeparam name="TDescriber">The type of the error describer.</typeparam>
71 |         /// <param name="builder">The <see cref="IdentityBuilder"/> instance.</param>
72 |         /// <returns>The <see cref="IdentityBuilder"/> instance.</returns>
73 |         public static IdentityBuilder AddPwnedPasswordErrorDescriber<TDescriber>(this IdentityBuilder builder) 
74 |             where TDescriber : PwnedPasswordErrorDescriber
75 |         {
76 |             builder.Services.AddScoped<PwnedPasswordErrorDescriber, TDescriber>();
77 |             return builder;
78 |         }
79 |     }
80 | }
81 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/PwnedPasswordValidatorTests.cs:
--------------------------------------------------------------------------------
  1 | using System;
  2 | using System.Threading;
  3 | using System.Threading.Tasks;
  4 | using Microsoft.AspNetCore.Identity;
  5 | using Microsoft.AspNetCore.Identity.Test;
  6 | using Microsoft.Extensions.Options;
  7 | using Moq;
  8 | using PwnedPasswords.Client;
  9 | using Xunit;
 10 | 
 11 | namespace PwnedPasswords.Validator.Test
 12 | {
 13 |     public class PwnedPasswordValidatorTests
 14 |     {
 15 |         const string _error = "The password you chose has appeared in a data breach.";
 16 | 
 17 |         private readonly PwnedPasswordErrorDescriber Describer =
 18 |             new PwnedPasswordErrorDescriber(Options.Create(new PwnedPasswordValidatorOptions {ErrorMessage = _error}));
 19 | 
 20 |         [Fact]
 21 |         public void ValidateThrowsWithNullClientTest()
 22 |         {
 23 |             // Setup
 24 |             // Act
 25 |             // Assert
 26 |             Assert.Throws<ArgumentNullException>("client", () => new PwnedPasswordValidator<TestUser>(null, Describer));
 27 |         }
 28 | 
 29 |         [Fact]
 30 |         public async Task SucceedsIfNullPassword()
 31 |         {
 32 |             var client = new Mock<IPwnedPasswordsClient>();
 33 | 
 34 |             string input = null;
 35 |             var manager = MockHelpers.TestUserManager<TestUser>();
 36 |             var validator = new PwnedPasswordValidator<TestUser>(client.Object, Describer);
 37 | 
 38 |             IdentityResultAssert.IsSuccess(await validator.ValidateAsync(manager, null, input));
 39 |         }
 40 | 
 41 |         [Fact]
 42 |         public async Task SucceedsIfZeroLengthPassword()
 43 |         {
 44 |             var client = new Mock<IPwnedPasswordsClient>();
 45 | 
 46 |             var input = string.Empty;
 47 |             var manager = MockHelpers.TestUserManager<TestUser>();
 48 |             var validator = new PwnedPasswordValidator<TestUser>(client.Object, Describer);
 49 | 
 50 |             IdentityResultAssert.IsSuccess(await validator.ValidateAsync(manager, null, input));
 51 |         }
 52 | 
 53 |         [Fact]
 54 |         public async Task FailsIfclientIndicatesPasswordIsPwned()
 55 |         {
 56 |             var client = new Mock<IPwnedPasswordsClient>();
 57 |             client.Setup(x => x.HasPasswordBeenPwned(It.IsAny<string>(), It.IsAny<CancellationToken>()))
 58 |                 .ReturnsAsync(true);
 59 | 
 60 |             var input = "password";
 61 |             var manager = MockHelpers.TestUserManager<TestUser>();
 62 |             var validator = new PwnedPasswordValidator<TestUser>(client.Object, Describer);
 63 | 
 64 |             IdentityResultAssert.IsFailure(await validator.ValidateAsync(manager, null, input), _error);
 65 |         }
 66 |         
 67 |         [Fact]
 68 |         public async Task SuccessIfclientIndicatesPasswordIsNotPwned()
 69 |         {
 70 |             var client = new Mock<IPwnedPasswordsClient>();
 71 |             client.Setup(x => x.HasPasswordBeenPwned(It.IsAny<string>(), It.IsAny<CancellationToken>()))
 72 |                 .ReturnsAsync(false);
 73 | 
 74 |             var input = "password";
 75 |             var manager = MockHelpers.TestUserManager<TestUser>();
 76 |             var validator = new PwnedPasswordValidator<TestUser>(client.Object, Describer);
 77 | 
 78 |             IdentityResultAssert.IsSuccess(await validator.ValidateAsync(manager, null, input));
 79 |         }
 80 |         
 81 |         [Fact]
 82 |         public async Task ReturnsMessageFromOverriddenDescriber()
 83 |         {
 84 |             var client = new Mock<IPwnedPasswordsClient>();
 85 |             client.Setup(x => x.HasPasswordBeenPwned(It.IsAny<string>(), It.IsAny<CancellationToken>()))
 86 |                 .ReturnsAsync(true);
 87 | 
 88 |             var input = "password";
 89 |             var manager = MockHelpers.TestUserManager<TestUser>();
 90 |             var validator = new PwnedPasswordValidator<TestUser>(client.Object, new OverriddenErrorDescriber());
 91 | 
 92 |             IdentityResultAssert.IsFailure(await validator.ValidateAsync(manager, null, input),
 93 |                 OverriddenErrorDescriber.OverriddenDescription);
 94 |         }
 95 | 
 96 |         private class OverriddenErrorDescriber : PwnedPasswordErrorDescriber
 97 |         {
 98 |             public const string OverriddenDescription = "Overridden description";
 99 | 
100 |             public override IdentityError PwnedPassword()
101 |             {
102 |                 return new IdentityError
103 |                 {
104 |                     Code = nameof(PwnedPassword),
105 |                     Description = OverriddenDescription
106 |                 };
107 |             }
108 |         }
109 |     }
110 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Pages/Index.cshtml:
--------------------------------------------------------------------------------
 1 | @page
 2 | @model IndexModel
 3 | @{
 4 |     ViewData["Title"] = "Home page";
 5 | }
 6 | 
 7 | <div id="myCarousel" class="carousel slide" data-ride="carousel" data-interval="6000">
 8 |     <ol class="carousel-indicators">
 9 |         <li data-target="#myCarousel" data-slide-to="0" class="active"></li>
10 |         <li data-target="#myCarousel" data-slide-to="1"></li>
11 |         <li data-target="#myCarousel" data-slide-to="2"></li>
12 |     </ol>
13 |     <div class="carousel-inner" role="listbox">
14 |         <div class="item active">
15 |             <img src="~/images/banner1.svg" alt="ASP.NET" class="img-responsive" />
16 |             <div class="carousel-caption" role="option">
17 |                 <p>
18 |                     Learn how to build ASP.NET apps that can run anywhere.
19 |                     <a class="btn btn-default" href="https://go.microsoft.com/fwlink/?LinkID=525028&clcid=0x409">
20 |                         Learn More
21 |                     </a>
22 |                 </p>
23 |             </div>
24 |         </div>
25 |         <div class="item">
26 |             <img src="~/images/banner2.svg" alt="Visual Studio" class="img-responsive" />
27 |             <div class="carousel-caption" role="option">
28 |                 <p>
29 |                     There are powerful new features in Visual Studio for building modern web apps.
30 |                     <a class="btn btn-default" href="https://go.microsoft.com/fwlink/?LinkID=525030&clcid=0x409">
31 |                         Learn More
32 |                     </a>
33 |                 </p>
34 |             </div>
35 |         </div>
36 |         <div class="item">
37 |             <img src="~/images/banner3.svg" alt="Microsoft Azure" class="img-responsive" />
38 |             <div class="carousel-caption" role="option">
39 |                 <p>
40 |                     Learn how Microsoft's Azure cloud platform allows you to build, deploy, and scale web apps.
41 |                     <a class="btn btn-default" href="https://go.microsoft.com/fwlink/?LinkID=525027&clcid=0x409">
42 |                         Learn More
43 |                     </a>
44 |                 </p>
45 |             </div>
46 |         </div>
47 |     </div>
48 |     <a class="left carousel-control" href="#myCarousel" role="button" data-slide="prev">
49 |         <span class="glyphicon glyphicon-chevron-left" aria-hidden="true"></span>
50 |         <span class="sr-only">Previous</span>
51 |     </a>
52 |     <a class="right carousel-control" href="#myCarousel" role="button" data-slide="next">
53 |         <span class="glyphicon glyphicon-chevron-right" aria-hidden="true"></span>
54 |         <span class="sr-only">Next</span>
55 |     </a>
56 | </div>
57 | 
58 | <div class="row">
59 |     <div class="col-md-3">
60 |         <h2>Application uses</h2>
61 |         <ul>
62 |             <li>Sample pages using ASP.NET Core Razor Pages</li>
63 |             <li>Theming using <a href="https://go.microsoft.com/fwlink/?LinkID=398939">Bootstrap</a></li>
64 |         </ul>
65 |     </div>
66 |     <div class="col-md-3">
67 |         <h2>How to</h2>
68 |         <ul>
69 |             <li><a href="https://go.microsoft.com/fwlink/?linkid=852130">Working with Razor Pages.</a></li>
70 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=699315">Manage User Secrets using Secret Manager.</a></li>
71 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=699316">Use logging to log a message.</a></li>
72 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=699317">Add packages using NuGet.</a></li>
73 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=699319">Target development, staging or production environment.</a></li>
74 |         </ul>
75 |     </div>
76 |     <div class="col-md-3">
77 |         <h2>Overview</h2>
78 |         <ul>
79 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=518008">Conceptual overview of what is ASP.NET Core</a></li>
80 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=699320">Fundamentals of ASP.NET Core such as Startup and middleware.</a></li>
81 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=398602">Working with Data</a></li>
82 |             <li><a href="https://go.microsoft.com/fwlink/?LinkId=398603">Security</a></li>
83 |             <li><a href="https://go.microsoft.com/fwlink/?LinkID=699321">Client side development</a></li>
84 |             <li><a href="https://go.microsoft.com/fwlink/?LinkID=699322">Develop on different platforms</a></li>
85 |             <li><a href="https://go.microsoft.com/fwlink/?LinkID=699323">Read more on the documentation site</a></li>
86 |         </ul>
87 |     </div>
88 |     <div class="col-md-3">
89 |         <h2>Run &amp; Deploy</h2>
90 |         <ul>
91 |             <li><a href="https://go.microsoft.com/fwlink/?LinkID=517851">Run your app</a></li>
92 |             <li><a href="https://go.microsoft.com/fwlink/?LinkID=517853">Run tools such as EF migrations and more</a></li>
93 |             <li><a href="https://go.microsoft.com/fwlink/?LinkID=398609">Publish to Microsoft Azure App Service</a></li>
94 |         </ul>
95 |     </div>
96 | </div>
97 | 


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/TestUser.cs:
--------------------------------------------------------------------------------
  1 | /// Taken from https://github.com/aspnet/Identity/blob/1659257ed8a39491609c64c87cb28d2df5930620/test/Shared
  2 | // Copyright (c) .NET Foundation. All rights reserved.
  3 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
  4 | 
  5 | using System;
  6 | using System.Collections.Generic;
  7 | 
  8 | namespace Microsoft.AspNetCore.Identity.Test
  9 | {
 10 |     /// <summary>
 11 |     /// Test user class
 12 |     /// </summary>
 13 |     public class TestUser : TestUser<string>
 14 |     {
 15 |         /// <summary>
 16 |         /// Ctor
 17 |         /// </summary>
 18 |         public TestUser()
 19 |         {
 20 |             Id = Guid.NewGuid().ToString();
 21 |         }
 22 | 
 23 |         /// <summary>
 24 |         /// Ctor
 25 |         /// </summary>
 26 |         /// <param name="userName"></param>
 27 |         public TestUser(string userName) : this()
 28 |         {
 29 |             UserName = userName;
 30 |         }
 31 |     }
 32 | 
 33 |     /// <summary>
 34 |     /// Test user
 35 |     /// </summary>
 36 |     /// <typeparam name="TKey"></typeparam>
 37 |     public class TestUser<TKey> where TKey : IEquatable<TKey>
 38 |     {
 39 |         /// <summary>
 40 |         /// ctor
 41 |         /// </summary>
 42 |         public TestUser() { }
 43 | 
 44 |         /// <summary>
 45 |         /// ctor
 46 |         /// </summary>
 47 |         /// <param name="userName"></param>
 48 |         public TestUser(string userName) : this()
 49 |         {
 50 |             UserName = userName;
 51 |         }
 52 | 
 53 |         /// <summary>
 54 |         /// Id
 55 |         /// </summary>
 56 |         public virtual TKey Id { get; set; }
 57 | 
 58 |         /// <summary>
 59 |         /// Name
 60 |         /// </summary>
 61 |         public virtual string UserName { get; set; }
 62 | 
 63 |         /// <summary>
 64 |         /// normalized user name
 65 |         /// </summary>
 66 |         public virtual string NormalizedUserName { get; set; }
 67 | 
 68 |         /// <summary>
 69 |         ///     Email
 70 |         /// </summary>
 71 |         public virtual string Email { get; set; }
 72 | 
 73 |         /// <summary>
 74 |         /// normalized email
 75 |         /// </summary>
 76 |         public virtual string NormalizedEmail { get; set; }
 77 | 
 78 |         /// <summary>
 79 |         ///     True if the email is confirmed, default is false
 80 |         /// </summary>
 81 |         public virtual bool EmailConfirmed { get; set; }
 82 | 
 83 |         /// <summary>
 84 |         ///     The salted/hashed form of the user password
 85 |         /// </summary>
 86 |         public virtual string PasswordHash { get; set; }
 87 | 
 88 |         /// <summary>
 89 |         /// A random value that should change whenever a users credentials change (password changed, login removed)
 90 |         /// </summary>
 91 |         public virtual string SecurityStamp { get; set; }
 92 | 
 93 |         /// <summary>
 94 |         /// A random value that should change whenever a user is persisted to the store
 95 |         /// </summary>
 96 |         public virtual string ConcurrencyStamp { get; set; } = Guid.NewGuid().ToString();
 97 | 
 98 |         /// <summary>
 99 |         ///     PhoneNumber for the user
100 |         /// </summary>
101 |         public virtual string PhoneNumber { get; set; }
102 | 
103 |         /// <summary>
104 |         ///     True if the phone number is confirmed, default is false
105 |         /// </summary>
106 |         public virtual bool PhoneNumberConfirmed { get; set; }
107 | 
108 |         /// <summary>
109 |         ///     Is two factor enabled for the user
110 |         /// </summary>
111 |         public virtual bool TwoFactorEnabled { get; set; }
112 | 
113 |         /// <summary>
114 |         ///     DateTime in UTC when lockout ends, any time in the past is considered not locked out.
115 |         /// </summary>
116 |         public virtual DateTimeOffset? LockoutEnd { get; set; }
117 | 
118 |         /// <summary>
119 |         ///     Is lockout enabled for this user
120 |         /// </summary>
121 |         public virtual bool LockoutEnabled { get; set; }
122 | 
123 |         /// <summary>
124 |         ///     Used to record failures for the purposes of lockout
125 |         /// </summary>
126 |         public virtual int AccessFailedCount { get; set; }
127 | 
128 |         /// <summary>
129 |         /// Navigation property
130 |         /// </summary>
131 |         public virtual ICollection<TestUserRole<TKey>> Roles { get; private set; } = new List<TestUserRole<TKey>>();
132 |         /// <summary>
133 |         /// Navigation property
134 |         /// </summary>
135 |         public virtual ICollection<TestUserClaim<TKey>> Claims { get; private set; } = new List<TestUserClaim<TKey>>();
136 |         /// <summary>
137 |         /// Navigation property
138 |         /// </summary>
139 |         public virtual ICollection<TestUserLogin<TKey>> Logins { get; private set; } = new List<TestUserLogin<TKey>>();
140 |         /// <summary>
141 |         /// Navigation property
142 |         /// </summary>
143 |         public virtual ICollection<TestUserToken<TKey>> Tokens { get; private set; } = new List<TestUserToken<TKey>>();
144 |     }
145 | }


--------------------------------------------------------------------------------
/test/PwnedPasswords.Validator.Test/Shared/MockHelpers.cs:
--------------------------------------------------------------------------------
  1 | // Copyright (c) .NET Foundation. All rights reserved.
  2 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
  3 | 
  4 | using System;
  5 | using System.Collections.Generic;
  6 | using System.Text;
  7 | using System.Threading.Tasks;
  8 | using Microsoft.AspNetCore.Builder;
  9 | using Microsoft.Extensions.Logging;
 10 | using Microsoft.Extensions.Options;
 11 | using Moq;
 12 | 
 13 | namespace Microsoft.AspNetCore.Identity.Test
 14 | {
 15 |     public static class MockHelpers
 16 |     {
 17 |         public static StringBuilder LogMessage = new StringBuilder();
 18 | 
 19 |         public static Mock<IOptions<IdentityOptions>> MockOptions(int requiredLength = 1)
 20 |         {
 21 |             var options = new Mock<IOptions<IdentityOptions>>();
 22 |             var idOptions = new IdentityOptions();
 23 |             idOptions.Password.RequiredLength = requiredLength;
 24 |             options.Setup(o => o.Value).Returns(idOptions);
 25 |             return options;
 26 |         }
 27 | 
 28 |         public static Mock<UserManager<TUser>> MockUserManager<TUser>() where TUser : class
 29 |         {
 30 |             var store = new Mock<IUserStore<TUser>>();
 31 |             var mgr = new Mock<UserManager<TUser>>(store.Object, null, null, null, null, null, null, null, null);
 32 |             mgr.Object.UserValidators.Add(new UserValidator<TUser>());
 33 |             mgr.Object.PasswordValidators.Add(new PasswordValidator<TUser>());
 34 |             return mgr;
 35 |         }
 36 | 
 37 |         public static Mock<RoleManager<TRole>> MockRoleManager<TRole>(IRoleStore<TRole> store = null) where TRole : class
 38 |         {
 39 |             store = store ?? new Mock<IRoleStore<TRole>>().Object;
 40 |             var roles = new List<IRoleValidator<TRole>>();
 41 |             roles.Add(new RoleValidator<TRole>());
 42 |             return new Mock<RoleManager<TRole>>(store, roles, new UpperInvariantLookupNormalizer(),
 43 |                 new IdentityErrorDescriber(), null);
 44 |         }
 45 | 
 46 |         public static Mock<ILogger<T>> MockILogger<T>(StringBuilder logStore = null) where T : class
 47 |         {
 48 |             logStore = logStore ?? LogMessage;
 49 |             var logger = new Mock<ILogger<T>>();
 50 |             logger.Setup(x => x.Log(It.IsAny<LogLevel>(), It.IsAny<EventId>(), It.IsAny<object>(),
 51 |                 It.IsAny<Exception>(), It.IsAny<Func<object, Exception, string>>()))
 52 |                 .Callback((LogLevel logLevel, EventId eventId, object state, Exception exception, Func<object, Exception, string> formatter) =>
 53 |                 {
 54 |                     if (formatter == null)
 55 |                     {
 56 |                         logStore.Append(state.ToString());
 57 |                     }
 58 |                     else
 59 |                     {
 60 |                         logStore.Append(formatter(state, exception));
 61 |                     }
 62 |                     logStore.Append(" ");
 63 |                 });
 64 |             logger.Setup(x => x.BeginScope(It.IsAny<object>())).Callback((object state) =>
 65 |                 {
 66 |                     logStore.Append(state.ToString());
 67 |                     logStore.Append(" ");
 68 |                 });
 69 |             logger.Setup(x => x.IsEnabled(LogLevel.Debug)).Returns(true);
 70 |             logger.Setup(x => x.IsEnabled(LogLevel.Warning)).Returns(true);
 71 | 
 72 |             return logger;
 73 |         }
 74 | 
 75 |         public static UserManager<TUser> TestUserManager<TUser>(IUserStore<TUser> store = null) where TUser : class
 76 |         {
 77 |             store = store ?? new Mock<IUserStore<TUser>>().Object;
 78 |             var options = new Mock<IOptions<IdentityOptions>>();
 79 |             var idOptions = new IdentityOptions();
 80 |             idOptions.Lockout.AllowedForNewUsers = false;
 81 |             options.Setup(o => o.Value).Returns(idOptions);
 82 |             var userValidators = new List<IUserValidator<TUser>>();
 83 |             var validator = new Mock<IUserValidator<TUser>>();
 84 |             userValidators.Add(validator.Object);
 85 |             var pwdValidators = new List<PasswordValidator<TUser>>();
 86 |             pwdValidators.Add(new PasswordValidator<TUser>());
 87 |             var userManager = new UserManager<TUser>(store, options.Object, new PasswordHasher<TUser>(),
 88 |                 userValidators, pwdValidators, new UpperInvariantLookupNormalizer(),
 89 |                 new IdentityErrorDescriber(), null,
 90 |                 new Mock<ILogger<UserManager<TUser>>>().Object);
 91 |             validator.Setup(v => v.ValidateAsync(userManager, It.IsAny<TUser>()))
 92 |                 .Returns(Task.FromResult(IdentityResult.Success)).Verifiable();
 93 |             return userManager;
 94 |         }
 95 | 
 96 |         public static RoleManager<TRole> TestRoleManager<TRole>(IRoleStore<TRole> store = null) where TRole : class
 97 |         {
 98 |             store = store ?? new Mock<IRoleStore<TRole>>().Object;
 99 |             var roles = new List<IRoleValidator<TRole>>();
100 |             roles.Add(new RoleValidator<TRole>());
101 |             return new AspNetRoleManager<TRole>(store, roles,
102 |                 new UpperInvariantLookupNormalizer(),
103 |                 new IdentityErrorDescriber(),
104 |                 null,
105 |                 null);
106 |         }
107 | 
108 |         public static ILogger<T> StubLogger<T>()
109 |         {
110 |             var stub = new Mock<ILogger<T>>();
111 |             return stub.Object;
112 |         }
113 |     }
114 | }


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js:
--------------------------------------------------------------------------------
1 | // Unobtrusive validation support library for jQuery and jQuery Validate
2 | // Copyright (C) Microsoft Corporation. All rights reserved.
3 | // @version v3.2.9
4 | !function(a){"function"==typeof define&&define.amd?define("jquery.validate.unobtrusive",["jquery.validation"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery-validation")):jQuery.validator.unobtrusive=a(jQuery)}(function(a){function e(a,e,n){a.rules[e]=n,a.message&&(a.messages[e]=a.message)}function n(a){return a.replace(/^\s+|\s+$/g,"").split(/\s*,\s*/g)}function t(a){return a.replace(/([!"#$%&'()*+,.\/:;<=>?@\[\\\]^`{|}~])/g,"\\$1")}function r(a){return a.substr(0,a.lastIndexOf(".")+1)}function i(a,e){return 0===a.indexOf("*.")&&(a=a.replace("*.",e)),a}function o(e,n){var r=a(this).find("[data-valmsg-for='"+t(n[0].name)+"']"),i=r.attr("data-valmsg-replace"),o=i?a.parseJSON(i)!==!1:null;r.removeClass("field-validation-valid").addClass("field-validation-error"),e.data("unobtrusiveContainer",r),o?(r.empty(),e.removeClass("input-validation-error").appendTo(r)):e.hide()}function d(e,n){var t=a(this).find("[data-valmsg-summary=true]"),r=t.find("ul");r&&r.length&&n.errorList.length&&(r.empty(),t.addClass("validation-summary-errors").removeClass("validation-summary-valid"),a.each(n.errorList,function(){a("<li />").html(this.message).appendTo(r)}))}function s(e){var n=e.data("unobtrusiveContainer");if(n){var t=n.attr("data-valmsg-replace"),r=t?a.parseJSON(t):null;n.addClass("field-validation-valid").removeClass("field-validation-error"),e.removeData("unobtrusiveContainer"),r&&n.empty()}}function l(e){var n=a(this),t="__jquery_unobtrusive_validation_form_reset";if(!n.data(t)){n.data(t,!0);try{n.data("validator").resetForm()}finally{n.removeData(t)}n.find(".validation-summary-errors").addClass("validation-summary-valid").removeClass("validation-summary-errors"),n.find(".field-validation-error").addClass("field-validation-valid").removeClass("field-validation-error").removeData("unobtrusiveContainer").find(">*").removeData("unobtrusiveContainer")}}function u(e){var n=a(e),t=n.data(v),r=a.proxy(l,e),i=f.unobtrusive.options||{},u=function(n,t){var r=i[n];r&&a.isFunction(r)&&r.apply(e,t)};return t||(t={options:{errorClass:i.errorClass||"input-validation-error",errorElement:i.errorElement||"span",errorPlacement:function(){o.apply(e,arguments),u("errorPlacement",arguments)},invalidHandler:function(){d.apply(e,arguments),u("invalidHandler",arguments)},messages:{},rules:{},success:function(){s.apply(e,arguments),u("success",arguments)}},attachValidation:function(){n.off("reset."+v,r).on("reset."+v,r).validate(this.options)},validate:function(){return n.validate(),n.valid()}},n.data(v,t)),t}var m,f=a.validator,v="unobtrusiveValidation";return f.unobtrusive={adapters:[],parseElement:function(e,n){var t,r,i,o=a(e),d=o.parents("form")[0];d&&(t=u(d),t.options.rules[e.name]=r={},t.options.messages[e.name]=i={},a.each(this.adapters,function(){var n="data-val-"+this.name,t=o.attr(n),s={};void 0!==t&&(n+="-",a.each(this.params,function(){s[this]=o.attr(n+this)}),this.adapt({element:e,form:d,message:t,params:s,rules:r,messages:i}))}),a.extend(r,{__dummy__:!0}),n||t.attachValidation())},parse:function(e){var n=a(e),t=n.parents().addBack().filter("form").add(n.find("form")).has("[data-val=true]");n.find("[data-val=true]").each(function(){f.unobtrusive.parseElement(this,!0)}),t.each(function(){var a=u(this);a&&a.attachValidation()})}},m=f.unobtrusive.adapters,m.add=function(a,e,n){return n||(n=e,e=[]),this.push({name:a,params:e,adapt:n}),this},m.addBool=function(a,n){return this.add(a,function(t){e(t,n||a,!0)})},m.addMinMax=function(a,n,t,r,i,o){return this.add(a,[i||"min",o||"max"],function(a){var i=a.params.min,o=a.params.max;i&&o?e(a,r,[i,o]):i?e(a,n,i):o&&e(a,t,o)})},m.addSingleVal=function(a,n,t){return this.add(a,[n||"val"],function(r){e(r,t||a,r.params[n])})},f.addMethod("__dummy__",function(a,e,n){return!0}),f.addMethod("regex",function(a,e,n){var t;return!!this.optional(e)||(t=new RegExp(n).exec(a),t&&0===t.index&&t[0].length===a.length)}),f.addMethod("nonalphamin",function(a,e,n){var t;return n&&(t=a.match(/\W/g),t=t&&t.length>=n),t}),f.methods.extension?(m.addSingleVal("accept","mimtype"),m.addSingleVal("extension","extension")):m.addSingleVal("extension","extension","accept"),m.addSingleVal("regex","pattern"),m.addBool("creditcard").addBool("date").addBool("digits").addBool("email").addBool("number").addBool("url"),m.addMinMax("length","minlength","maxlength","rangelength").addMinMax("range","min","max","range"),m.addMinMax("minlength","minlength").addMinMax("maxlength","minlength","maxlength"),m.add("equalto",["other"],function(n){var o=r(n.element.name),d=n.params.other,s=i(d,o),l=a(n.form).find(":input").filter("[name='"+t(s)+"']")[0];e(n,"equalTo",l)}),m.add("required",function(a){"INPUT"===a.element.tagName.toUpperCase()&&"CHECKBOX"===a.element.type.toUpperCase()||e(a,"required",!0)}),m.add("remote",["url","type","additionalfields"],function(o){var d={url:o.params.url,type:o.params.type||"GET",data:{}},s=r(o.element.name);a.each(n(o.params.additionalfields||o.element.name),function(e,n){var r=i(n,s);d.data[r]=function(){var e=a(o.form).find(":input").filter("[name='"+t(r)+"']");return e.is(":checkbox")?e.filter(":checked").val()||e.filter(":hidden").val()||"":e.is(":radio")?e.filter(":checked").val()||"":e.val()}}),e(o,"remote",d)}),m.add("password",["min","nonalphamin","regex"],function(a){a.params.min&&e(a,"minlength",a.params.min),a.params.nonalphamin&&e(a,"nonalphamin",a.params.nonalphamin),a.params.regex&&e(a,"regex",a.params.regex)}),m.add("fileextensions",["extensions"],function(a){e(a,"extension",a.params.extensions)}),a(function(){f.unobtrusive.parse(document)}),f.unobtrusive});


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
  1 | ## Ignore Visual Studio temporary files, build results, and
  2 | ## files generated by popular Visual Studio add-ons.
  3 | 
  4 | # User-specific files
  5 | *.suo
  6 | *.user
  7 | *.userosscache
  8 | *.sln.docstates
  9 | 
 10 | # User-specific files (MonoDevelop/Xamarin Studio)
 11 | *.userprefs
 12 | 
 13 | # Build results
 14 | [Dd]ebug/
 15 | [Dd]ebugPublic/
 16 | [Rr]elease/
 17 | [Rr]eleases/
 18 | x64/
 19 | x86/
 20 | bld/
 21 | [Bb]in/
 22 | [Oo]bj/
 23 | [Ll]og/
 24 | 
 25 | # Visual Studio 2015 cache/options directory
 26 | .vs/
 27 | # Uncomment if you have tasks that create the project's static files in wwwroot
 28 | #wwwroot/
 29 | 
 30 | # MSTest test Results
 31 | [Tt]est[Rr]esult*/
 32 | [Bb]uild[Ll]og.*
 33 | 
 34 | # NUNIT
 35 | *.VisualState.xml
 36 | TestResult.xml
 37 | 
 38 | # Build Results of an ATL Project
 39 | [Dd]ebugPS/
 40 | [Rr]eleasePS/
 41 | dlldata.c
 42 | 
 43 | # DNX
 44 | project.lock.json
 45 | project.fragment.lock.json
 46 | artifacts/
 47 | 
 48 | *_i.c
 49 | *_p.c
 50 | *_i.h
 51 | *.ilk
 52 | *.meta
 53 | *.obj
 54 | *.pch
 55 | *.pdb
 56 | *.pgc
 57 | *.pgd
 58 | *.rsp
 59 | *.sbr
 60 | *.tlb
 61 | *.tli
 62 | *.tlh
 63 | *.tmp
 64 | *.tmp_proj
 65 | *.log
 66 | *.vspscc
 67 | *.vssscc
 68 | .builds
 69 | *.pidb
 70 | *.svclog
 71 | *.scc
 72 | 
 73 | # Chutzpah Test files
 74 | _Chutzpah*
 75 | 
 76 | # Visual C++ cache files
 77 | ipch/
 78 | *.aps
 79 | *.ncb
 80 | *.opendb
 81 | *.opensdf
 82 | *.sdf
 83 | *.cachefile
 84 | *.VC.db
 85 | *.VC.VC.opendb
 86 | 
 87 | # Visual Studio profiler
 88 | *.psess
 89 | *.vsp
 90 | *.vspx
 91 | *.sap
 92 | 
 93 | # TFS 2012 Local Workspace
 94 | $tf/
 95 | 
 96 | # Guidance Automation Toolkit
 97 | *.gpState
 98 | 
 99 | # ReSharper is a .NET coding add-in
100 | _ReSharper*/
101 | *.[Rr]e[Ss]harper
102 | *.DotSettings.user
103 | 
104 | # JustCode is a .NET coding add-in
105 | .JustCode
106 | 
107 | # TeamCity is a build add-in
108 | _TeamCity*
109 | 
110 | # DotCover is a Code Coverage Tool
111 | *.dotCover
112 | 
113 | # NCrunch
114 | _NCrunch_*
115 | .*crunch*.local.xml
116 | nCrunchTemp_*
117 | 
118 | # MightyMoose
119 | *.mm.*
120 | AutoTest.Net/
121 | 
122 | # Web workbench (sass)
123 | .sass-cache/
124 | 
125 | # Installshield output folder
126 | [Ee]xpress/
127 | 
128 | # DocProject is a documentation generator add-in
129 | DocProject/buildhelp/
130 | DocProject/Help/*.HxT
131 | DocProject/Help/*.HxC
132 | DocProject/Help/*.hhc
133 | DocProject/Help/*.hhk
134 | DocProject/Help/*.hhp
135 | DocProject/Help/Html2
136 | DocProject/Help/html
137 | 
138 | # Click-Once directory
139 | publish/
140 | 
141 | # Publish Web Output
142 | *.[Pp]ublish.xml
143 | *.azurePubxml
144 | # TODO: Comment the next line if you want to checkin your web deploy settings
145 | # but database connection strings (with potential passwords) will be unencrypted
146 | #*.pubxml
147 | *.publishproj
148 | 
149 | # Microsoft Azure Web App publish settings. Comment the next line if you want to
150 | # checkin your Azure Web App publish settings, but sensitive information contained
151 | # in these scripts will be unencrypted
152 | PublishScripts/
153 | 
154 | # NuGet Packages
155 | *.nupkg
156 | # The packages folder can be ignored because of Package Restore
157 | **/packages/*
158 | # except build/, which is used as an MSBuild target.
159 | !**/packages/build/
160 | # Uncomment if necessary however generally it will be regenerated when needed
161 | #!**/packages/repositories.config
162 | # NuGet v3's project.json files produces more ignoreable files
163 | *.nuget.props
164 | *.nuget.targets
165 | 
166 | # Microsoft Azure Build Output
167 | csx/
168 | *.build.csdef
169 | 
170 | # Microsoft Azure Emulator
171 | ecf/
172 | rcf/
173 | 
174 | # Windows Store app package directories and files
175 | AppPackages/
176 | BundleArtifacts/
177 | Package.StoreAssociation.xml
178 | _pkginfo.txt
179 | 
180 | # Visual Studio cache files
181 | # files ending in .cache can be ignored
182 | *.[Cc]ache
183 | # but keep track of directories ending in .cache
184 | !*.[Cc]ache/
185 | 
186 | # Others
187 | ClientBin/
188 | ~$*
189 | *~
190 | *.dbmdl
191 | *.dbproj.schemaview
192 | *.jfm
193 | *.pfx
194 | *.publishsettings
195 | node_modules/
196 | orleans.codegen.cs
197 | 
198 | # Since there are multiple workflows, uncomment next line to ignore bower_components
199 | # (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
200 | #bower_components/
201 | 
202 | # RIA/Silverlight projects
203 | Generated_Code/
204 | 
205 | # Backup & report files from converting an old project file
206 | # to a newer Visual Studio version. Backup files are not needed,
207 | # because we have git ;-)
208 | _UpgradeReport_Files/
209 | Backup*/
210 | UpgradeLog*.XML
211 | UpgradeLog*.htm
212 | 
213 | # SQL Server files
214 | *.mdf
215 | *.ldf
216 | 
217 | # Business Intelligence projects
218 | *.rdl.data
219 | *.bim.layout
220 | *.bim_*.settings
221 | 
222 | # Microsoft Fakes
223 | FakesAssemblies/
224 | 
225 | # GhostDoc plugin setting file
226 | *.GhostDoc.xml
227 | 
228 | # Node.js Tools for Visual Studio
229 | .ntvs_analysis.dat
230 | 
231 | # Visual Studio 6 build log
232 | *.plg
233 | 
234 | # Visual Studio 6 workspace options file
235 | *.opt
236 | 
237 | # Visual Studio LightSwitch build output
238 | **/*.HTMLClient/GeneratedArtifacts
239 | **/*.DesktopClient/GeneratedArtifacts
240 | **/*.DesktopClient/ModelManifest.xml
241 | **/*.Server/GeneratedArtifacts
242 | **/*.Server/ModelManifest.xml
243 | _Pvt_Extensions
244 | 
245 | # Paket dependency manager
246 | .paket/paket.exe
247 | paket-files/
248 | 
249 | # FAKE - F# Make
250 | .fake/
251 | 
252 | # JetBrains Rider
253 | .idea/
254 | *.sln.iml
255 | 
256 | # CodeRush
257 | .cr/
258 | 
259 | # Python Tools for Visual Studio (PTVS)
260 | __pycache__/
261 | *.pyc
262 | 
263 | tools/
264 | !tools/packages.config


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js:
--------------------------------------------------------------------------------
1 | // Unobtrusive validation support library for jQuery and jQuery Validate
2 | // Copyright (c) .NET Foundation. All rights reserved.
3 | // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
4 | // @version v3.2.11
5 | !function(a){"function"==typeof define&&define.amd?define("jquery.validate.unobtrusive",["jquery-validation"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery-validation")):jQuery.validator.unobtrusive=a(jQuery)}(function(a){function e(a,e,n){a.rules[e]=n,a.message&&(a.messages[e]=a.message)}function n(a){return a.replace(/^\s+|\s+$/g,"").split(/\s*,\s*/g)}function t(a){return a.replace(/([!"#$%&'()*+,.\/:;<=>?@\[\\\]^`{|}~])/g,"\\$1")}function r(a){return a.substr(0,a.lastIndexOf(".")+1)}function i(a,e){return 0===a.indexOf("*.")&&(a=a.replace("*.",e)),a}function o(e,n){var r=a(this).find("[data-valmsg-for='"+t(n[0].name)+"']"),i=r.attr("data-valmsg-replace"),o=i?a.parseJSON(i)!==!1:null;r.removeClass("field-validation-valid").addClass("field-validation-error"),e.data("unobtrusiveContainer",r),o?(r.empty(),e.removeClass("input-validation-error").appendTo(r)):e.hide()}function d(e,n){var t=a(this).find("[data-valmsg-summary=true]"),r=t.find("ul");r&&r.length&&n.errorList.length&&(r.empty(),t.addClass("validation-summary-errors").removeClass("validation-summary-valid"),a.each(n.errorList,function(){a("<li />").html(this.message).appendTo(r)}))}function s(e){var n=e.data("unobtrusiveContainer");if(n){var t=n.attr("data-valmsg-replace"),r=t?a.parseJSON(t):null;n.addClass("field-validation-valid").removeClass("field-validation-error"),e.removeData("unobtrusiveContainer"),r&&n.empty()}}function l(e){var n=a(this),t="__jquery_unobtrusive_validation_form_reset";if(!n.data(t)){n.data(t,!0);try{n.data("validator").resetForm()}finally{n.removeData(t)}n.find(".validation-summary-errors").addClass("validation-summary-valid").removeClass("validation-summary-errors"),n.find(".field-validation-error").addClass("field-validation-valid").removeClass("field-validation-error").removeData("unobtrusiveContainer").find(">*").removeData("unobtrusiveContainer")}}function u(e){var n=a(e),t=n.data(v),r=a.proxy(l,e),i=f.unobtrusive.options||{},u=function(n,t){var r=i[n];r&&a.isFunction(r)&&r.apply(e,t)};return t||(t={options:{errorClass:i.errorClass||"input-validation-error",errorElement:i.errorElement||"span",errorPlacement:function(){o.apply(e,arguments),u("errorPlacement",arguments)},invalidHandler:function(){d.apply(e,arguments),u("invalidHandler",arguments)},messages:{},rules:{},success:function(){s.apply(e,arguments),u("success",arguments)}},attachValidation:function(){n.off("reset."+v,r).on("reset."+v,r).validate(this.options)},validate:function(){return n.validate(),n.valid()}},n.data(v,t)),t}var m,f=a.validator,v="unobtrusiveValidation";return f.unobtrusive={adapters:[],parseElement:function(e,n){var t,r,i,o=a(e),d=o.parents("form")[0];d&&(t=u(d),t.options.rules[e.name]=r={},t.options.messages[e.name]=i={},a.each(this.adapters,function(){var n="data-val-"+this.name,t=o.attr(n),s={};void 0!==t&&(n+="-",a.each(this.params,function(){s[this]=o.attr(n+this)}),this.adapt({element:e,form:d,message:t,params:s,rules:r,messages:i}))}),a.extend(r,{__dummy__:!0}),n||t.attachValidation())},parse:function(e){var n=a(e),t=n.parents().addBack().filter("form").add(n.find("form")).has("[data-val=true]");n.find("[data-val=true]").each(function(){f.unobtrusive.parseElement(this,!0)}),t.each(function(){var a=u(this);a&&a.attachValidation()})}},m=f.unobtrusive.adapters,m.add=function(a,e,n){return n||(n=e,e=[]),this.push({name:a,params:e,adapt:n}),this},m.addBool=function(a,n){return this.add(a,function(t){e(t,n||a,!0)})},m.addMinMax=function(a,n,t,r,i,o){return this.add(a,[i||"min",o||"max"],function(a){var i=a.params.min,o=a.params.max;i&&o?e(a,r,[i,o]):i?e(a,n,i):o&&e(a,t,o)})},m.addSingleVal=function(a,n,t){return this.add(a,[n||"val"],function(r){e(r,t||a,r.params[n])})},f.addMethod("__dummy__",function(a,e,n){return!0}),f.addMethod("regex",function(a,e,n){var t;return!!this.optional(e)||(t=new RegExp(n).exec(a),t&&0===t.index&&t[0].length===a.length)}),f.addMethod("nonalphamin",function(a,e,n){var t;return n&&(t=a.match(/\W/g),t=t&&t.length>=n),t}),f.methods.extension?(m.addSingleVal("accept","mimtype"),m.addSingleVal("extension","extension")):m.addSingleVal("extension","extension","accept"),m.addSingleVal("regex","pattern"),m.addBool("creditcard").addBool("date").addBool("digits").addBool("email").addBool("number").addBool("url"),m.addMinMax("length","minlength","maxlength","rangelength").addMinMax("range","min","max","range"),m.addMinMax("minlength","minlength").addMinMax("maxlength","minlength","maxlength"),m.add("equalto",["other"],function(n){var o=r(n.element.name),d=n.params.other,s=i(d,o),l=a(n.form).find(":input").filter("[name='"+t(s)+"']")[0];e(n,"equalTo",l)}),m.add("required",function(a){"INPUT"===a.element.tagName.toUpperCase()&&"CHECKBOX"===a.element.type.toUpperCase()||e(a,"required",!0)}),m.add("remote",["url","type","additionalfields"],function(o){var d={url:o.params.url,type:o.params.type||"GET",data:{}},s=r(o.element.name);a.each(n(o.params.additionalfields||o.element.name),function(e,n){var r=i(n,s);d.data[r]=function(){var e=a(o.form).find(":input").filter("[name='"+t(r)+"']");return e.is(":checkbox")?e.filter(":checked").val()||e.filter(":hidden").val()||"":e.is(":radio")?e.filter(":checked").val()||"":e.val()}}),e(o,"remote",d)}),m.add("password",["min","nonalphamin","regex"],function(a){a.params.min&&e(a,"minlength",a.params.min),a.params.nonalphamin&&e(a,"nonalphamin",a.params.nonalphamin),a.params.regex&&e(a,"regex",a.params.regex)}),m.add("fileextensions",["extensions"],function(a){e(a,"extension",a.params.extensions)}),a(function(){f.unobtrusive.parse(document)}),f.unobtrusive});


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/wwwroot/lib/bootstrap/dist/css/bootstrap-reboot.css:
--------------------------------------------------------------------------------
  1 | /*!
  2 |  * Bootstrap Reboot v4.3.1 (https://getbootstrap.com/)
  3 |  * Copyright 2011-2019 The Bootstrap Authors
  4 |  * Copyright 2011-2019 Twitter, Inc.
  5 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
  6 |  * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
  7 |  */
  8 | *,
  9 | *::before,
 10 | *::after {
 11 |   box-sizing: border-box;
 12 | }
 13 | 
 14 | html {
 15 |   font-family: sans-serif;
 16 |   line-height: 1.15;
 17 |   -webkit-text-size-adjust: 100%;
 18 |   -webkit-tap-highlight-color: rgba(0, 0, 0, 0);
 19 | }
 20 | 
 21 | article, aside, figcaption, figure, footer, header, hgroup, main, nav, section {
 22 |   display: block;
 23 | }
 24 | 
 25 | body {
 26 |   margin: 0;
 27 |   font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";
 28 |   font-size: 1rem;
 29 |   font-weight: 400;
 30 |   line-height: 1.5;
 31 |   color: #212529;
 32 |   text-align: left;
 33 |   background-color: #fff;
 34 | }
 35 | 
 36 | [tabindex="-1"]:focus {
 37 |   outline: 0 !important;
 38 | }
 39 | 
 40 | hr {
 41 |   box-sizing: content-box;
 42 |   height: 0;
 43 |   overflow: visible;
 44 | }
 45 | 
 46 | h1, h2, h3, h4, h5, h6 {
 47 |   margin-top: 0;
 48 |   margin-bottom: 0.5rem;
 49 | }
 50 | 
 51 | p {
 52 |   margin-top: 0;
 53 |   margin-bottom: 1rem;
 54 | }
 55 | 
 56 | abbr[title],
 57 | abbr[data-original-title] {
 58 |   text-decoration: underline;
 59 |   -webkit-text-decoration: underline dotted;
 60 |   text-decoration: underline dotted;
 61 |   cursor: help;
 62 |   border-bottom: 0;
 63 |   -webkit-text-decoration-skip-ink: none;
 64 |   text-decoration-skip-ink: none;
 65 | }
 66 | 
 67 | address {
 68 |   margin-bottom: 1rem;
 69 |   font-style: normal;
 70 |   line-height: inherit;
 71 | }
 72 | 
 73 | ol,
 74 | ul,
 75 | dl {
 76 |   margin-top: 0;
 77 |   margin-bottom: 1rem;
 78 | }
 79 | 
 80 | ol ol,
 81 | ul ul,
 82 | ol ul,
 83 | ul ol {
 84 |   margin-bottom: 0;
 85 | }
 86 | 
 87 | dt {
 88 |   font-weight: 700;
 89 | }
 90 | 
 91 | dd {
 92 |   margin-bottom: .5rem;
 93 |   margin-left: 0;
 94 | }
 95 | 
 96 | blockquote {
 97 |   margin: 0 0 1rem;
 98 | }
 99 | 
100 | b,
101 | strong {
102 |   font-weight: bolder;
103 | }
104 | 
105 | small {
106 |   font-size: 80%;
107 | }
108 | 
109 | sub,
110 | sup {
111 |   position: relative;
112 |   font-size: 75%;
113 |   line-height: 0;
114 |   vertical-align: baseline;
115 | }
116 | 
117 | sub {
118 |   bottom: -.25em;
119 | }
120 | 
121 | sup {
122 |   top: -.5em;
123 | }
124 | 
125 | a {
126 |   color: #007bff;
127 |   text-decoration: none;
128 |   background-color: transparent;
129 | }
130 | 
131 | a:hover {
132 |   color: #0056b3;
133 |   text-decoration: underline;
134 | }
135 | 
136 | a:not([href]):not([tabindex]) {
137 |   color: inherit;
138 |   text-decoration: none;
139 | }
140 | 
141 | a:not([href]):not([tabindex]):hover, a:not([href]):not([tabindex]):focus {
142 |   color: inherit;
143 |   text-decoration: none;
144 | }
145 | 
146 | a:not([href]):not([tabindex]):focus {
147 |   outline: 0;
148 | }
149 | 
150 | pre,
151 | code,
152 | kbd,
153 | samp {
154 |   font-family: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
155 |   font-size: 1em;
156 | }
157 | 
158 | pre {
159 |   margin-top: 0;
160 |   margin-bottom: 1rem;
161 |   overflow: auto;
162 | }
163 | 
164 | figure {
165 |   margin: 0 0 1rem;
166 | }
167 | 
168 | img {
169 |   vertical-align: middle;
170 |   border-style: none;
171 | }
172 | 
173 | svg {
174 |   overflow: hidden;
175 |   vertical-align: middle;
176 | }
177 | 
178 | table {
179 |   border-collapse: collapse;
180 | }
181 | 
182 | caption {
183 |   padding-top: 0.75rem;
184 |   padding-bottom: 0.75rem;
185 |   color: #6c757d;
186 |   text-align: left;
187 |   caption-side: bottom;
188 | }
189 | 
190 | th {
191 |   text-align: inherit;
192 | }
193 | 
194 | label {
195 |   display: inline-block;
196 |   margin-bottom: 0.5rem;
197 | }
198 | 
199 | button {
200 |   border-radius: 0;
201 | }
202 | 
203 | button:focus {
204 |   outline: 1px dotted;
205 |   outline: 5px auto -webkit-focus-ring-color;
206 | }
207 | 
208 | input,
209 | button,
210 | select,
211 | optgroup,
212 | textarea {
213 |   margin: 0;
214 |   font-family: inherit;
215 |   font-size: inherit;
216 |   line-height: inherit;
217 | }
218 | 
219 | button,
220 | input {
221 |   overflow: visible;
222 | }
223 | 
224 | button,
225 | select {
226 |   text-transform: none;
227 | }
228 | 
229 | select {
230 |   word-wrap: normal;
231 | }
232 | 
233 | button,
234 | [type="button"],
235 | [type="reset"],
236 | [type="submit"] {
237 |   -webkit-appearance: button;
238 | }
239 | 
240 | button:not(:disabled),
241 | [type="button"]:not(:disabled),
242 | [type="reset"]:not(:disabled),
243 | [type="submit"]:not(:disabled) {
244 |   cursor: pointer;
245 | }
246 | 
247 | button::-moz-focus-inner,
248 | [type="button"]::-moz-focus-inner,
249 | [type="reset"]::-moz-focus-inner,
250 | [type="submit"]::-moz-focus-inner {
251 |   padding: 0;
252 |   border-style: none;
253 | }
254 | 
255 | input[type="radio"],
256 | input[type="checkbox"] {
257 |   box-sizing: border-box;
258 |   padding: 0;
259 | }
260 | 
261 | input[type="date"],
262 | input[type="time"],
263 | input[type="datetime-local"],
264 | input[type="month"] {
265 |   -webkit-appearance: listbox;
266 | }
267 | 
268 | textarea {
269 |   overflow: auto;
270 |   resize: vertical;
271 | }
272 | 
273 | fieldset {
274 |   min-width: 0;
275 |   padding: 0;
276 |   margin: 0;
277 |   border: 0;
278 | }
279 | 
280 | legend {
281 |   display: block;
282 |   width: 100%;
283 |   max-width: 100%;
284 |   padding: 0;
285 |   margin-bottom: .5rem;
286 |   font-size: 1.5rem;
287 |   line-height: inherit;
288 |   color: inherit;
289 |   white-space: normal;
290 | }
291 | 
292 | progress {
293 |   vertical-align: baseline;
294 | }
295 | 
296 | [type="number"]::-webkit-inner-spin-button,
297 | [type="number"]::-webkit-outer-spin-button {
298 |   height: auto;
299 | }
300 | 
301 | [type="search"] {
302 |   outline-offset: -2px;
303 |   -webkit-appearance: none;
304 | }
305 | 
306 | [type="search"]::-webkit-search-decoration {
307 |   -webkit-appearance: none;
308 | }
309 | 
310 | ::-webkit-file-upload-button {
311 |   font: inherit;
312 |   -webkit-appearance: button;
313 | }
314 | 
315 | output {
316 |   display: inline-block;
317 | }
318 | 
319 | summary {
320 |   display: list-item;
321 |   cursor: pointer;
322 | }
323 | 
324 | template {
325 |   display: none;
326 | }
327 | 
328 | [hidden] {
329 |   display: none !important;
330 | }
331 | /*# sourceMappingURL=bootstrap-reboot.css.map */


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/images/banner2.svg:
--------------------------------------------------------------------------------
1 | <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1140 360" enable-background="new 0 0 1140 360"><path fill="#68217A" d="M0 0h1140v360h-1140v-360z"/><polygon fill="#E44D26" points="625.457,132.801 619.654,67.717 683.416,67.717 677.607,132.791 651.496,140.03"/><polygon fill="#F16529" points="651.535,134.497 672.634,128.648 677.598,73.039 651.535,73.039"/><polygon fill="#EBEBEB" points="651.535,97.178 640.973,97.178 640.243,89.004 651.535,89.004 651.535,81.021 651.508,81.021 631.519,81.021 631.71,83.163 633.672,105.16 651.535,105.16"/><polygon fill="#EBEBEB" points="651.535,117.909 651.5,117.918 642.61,115.517 642.042,109.151 637.722,109.151 634.029,109.151 635.147,121.685 651.499,126.224 651.535,126.214"/><path d="M625.587 50.03h4.057v4.008h3.711v-4.008h4.057v12.137h-4.057v-4.064h-3.711v4.064h-4.057v-12.137zm17.158 4.025h-3.571v-4.025h11.201v4.025h-3.573v8.112h-4.057v-8.112zm9.407-4.025h4.23l2.602 4.264 2.599-4.264h4.231v12.137h-4.04v-6.016l-2.791 4.315h-.07l-2.793-4.315v6.016h-3.969v-12.137zm15.682 0h4.058v8.125h5.705v4.012h-9.762v-12.137z"/><polygon fill="#fff" points="651.508,97.178 651.508,105.16 661.337,105.16 660.41,115.512 651.508,117.915 651.508,126.22 667.872,121.685 667.992,120.336 669.868,99.321 670.062,97.178 667.911,97.178"/><polygon fill="#fff" points="651.508,81.021 651.508,85.979 651.508,88.984 651.508,89.004 670.763,89.004 670.763,89.004 670.789,89.004 670.949,87.209 671.313,83.163 671.503,81.021"/><polygon points="777.75,55.803 777.75,51.656 767.862,51.656 767.862,63.777 777.75,63.777 777.75,59.631 772.008,59.631 772.008,55.803"/><polygon points="791.785,51.656 781.896,51.656 781.896,55.913 786.023,59.631 781.896,59.631 781.896,63.777 791.785,63.777 791.785,59.74 788.034,55.803 791.785,55.803"/><polygon points="806.138,51.656 796.25,51.656 796.25,55.913 800.217,59.631 796.25,59.631 796.25,63.777 806.138,63.777 806.138,59.74 802.228,55.803 806.138,55.803"/><polygon fill="#0071BC" points="760.908,134.424 755.103,69.309 818.897,69.309 813.085,134.413 786.961,141.656"/><polygon fill="#29ABE2" points="787.054,136.117 808.137,130.316 813.077,74.732 787.054,74.732"/><polygon fill="#B3B3B3" points="768.392,98.655 769.091,106.629 787.054,98.655 787.054,90.668"/><polygon fill="#E6E6E6" points="806.948,82.142 787.054,90.668 787.054,98.655 806.262,90.116"/><polygon fill="#E6E6E6" points="787.054,119.519 786.992,119.529 778.084,117.136 777.502,110.776 769.485,110.776 770.603,123.307 786.99,127.844 787.054,127.829"/><polygon fill="#fff" points="787.054,98.655 787.054,106.629 796.807,106.629 795.92,117.055 787.054,119.526 787.054,127.835 803.386,123.298 805.536,98.655"/><polygon fill="#E6E6E6" points="787.054,98.655 768.392,98.655 769.091,106.629 787.054,106.629"/><polygon fill="#E6E6E6" points="787.054,90.116 787.054,82.142 786.973,82.142 766.974,82.142 767.682,90.116"/><polygon fill="#fff" points="787.054,82.142 787.054,90.016 787.054,90.116 806.262,90.116 806.948,82.142"/><rect x="882.25" y="64.25" fill="#F0DB4F" width="70" height="70"/><path fill="#353630" d="M929.272 118.938c1.41 2.302 3.244 3.994 6.489 3.994 2.726 0 4.467-1.362 4.467-3.244 0-2.256-1.789-3.054-4.789-4.367l-1.644-.706c-4.747-2.022-7.9-4.556-7.9-9.911 0-4.933 3.759-8.689 9.633-8.689 4.182 0 7.189 1.456 9.356 5.267l-5.122 3.289c-1.128-2.022-2.344-2.819-4.233-2.819-1.927 0-3.148 1.222-3.148 2.819 0 1.973 1.222 2.772 4.044 3.994l1.644.704c5.589 2.397 8.744 4.84 8.744 10.333 0 5.922-4.652 9.167-10.9 9.167-6.109 0-10.056-2.911-11.987-6.727l5.346-3.104zm-23.236.57c1.033 1.833 1.973 3.383 4.233 3.383 2.161 0 3.524-.846 3.524-4.133v-22.367h6.578v22.456c0 6.811-3.993 9.911-9.822 9.911-5.267 0-8.317-2.726-9.868-6.008l5.355-3.242z"/><path d="M296.374 83.453c0 .708-.246 1.296-.737 1.763-.494.47-1.076.704-1.752.704-.693 0-1.277-.227-1.752-.681-.477-.452-.715-1.048-.715-1.786 0-.66.234-1.234.703-1.717.468-.484 1.057-.727 1.765-.727.706 0 1.299.239 1.775.715.475.477.713 1.054.713 1.729zm177.29 0c0 .708-.245 1.296-.737 1.763-.494.47-1.076.704-1.752.704-.693 0-1.277-.227-1.752-.681-.477-.452-.715-1.048-.715-1.786 0-.66.234-1.234.703-1.717.468-.484 1.057-.727 1.765-.727.706 0 1.299.239 1.775.715.475.477.713 1.054.713 1.729zm-184.79-1.697l-12.216 33.052h-4.241l-12.008-33.052h4.31l9.842 28.212h.092l10.072-28.212h4.149zm6.822 33.052h-3.78v-23.602h3.78v23.602zm19.173-6.316c0 2.044-.788 3.703-2.362 4.978-1.575 1.276-3.669 1.913-6.281 1.913-2.228 0-4.18-.476-5.854-1.429v-4.056c1.859 1.506 3.903 2.258 6.131 2.258 2.996 0 4.494-1.098 4.494-3.296 0-.891-.292-1.617-.876-2.178-.584-.561-1.913-1.317-3.988-2.27-2.09-.891-3.565-1.848-4.425-2.87-.861-1.022-1.291-2.378-1.291-4.068 0-1.951.784-3.58 2.351-4.886s3.557-1.959 5.97-1.959c1.859 0 3.542.369 5.048 1.106v3.803c-1.537-1.121-3.319-1.682-5.347-1.682-1.244 0-2.247.308-3.008.922-.761.614-1.141 1.406-1.141 2.374 0 1.045.292 1.848.876 2.408.584.561 1.79 1.226 3.619 1.994 2.243.953 3.818 1.951 4.725 2.996.906 1.046 1.359 2.36 1.359 3.942zm23.041 6.316h-3.78v-3.734h-.092c-1.567 2.873-3.987 4.31-7.26 4.31-5.639 0-8.459-3.357-8.459-10.072v-14.106h3.78v13.507c0 4.964 1.905 7.444 5.716 7.444 1.875 0 3.396-.68 4.564-2.04 1.168-1.36 1.752-3.13 1.752-5.313v-13.598h3.78v23.602zm22.716 0h-3.78v-3.688h-.092c-1.644 2.843-4.064 4.264-7.26 4.264-2.274 0-4.095-.618-5.462-1.855-1.368-1.237-2.051-2.9-2.051-4.99 0-4.394 2.597-6.961 7.791-7.698l7.076-.991c0-3.995-1.621-5.993-4.863-5.993-2.843 0-5.409.96-7.698 2.881v-3.872c.692-.522 1.875-1.026 3.549-1.51 1.675-.484 3.165-.726 4.472-.726 5.547 0 8.321 2.943 8.321 8.828v15.35zm-3.78-11.94l-5.716.807c-1.952.276-3.319.741-4.103 1.394-.784.653-1.176 1.71-1.176 3.17 0 1.183.422 2.132 1.268 2.846.845.714 1.928 1.071 3.25 1.071 1.875 0 3.423-.66 4.644-1.982 1.222-1.321 1.832-2.973 1.832-4.956v-2.35zm13.13 11.94h-3.78v-34.942h3.78v34.942zm29.875-8.344c0 2.781-.983 4.964-2.95 6.546-1.967 1.583-4.641 2.374-8.021 2.374-1.23 0-2.616-.204-4.16-.611-1.544-.407-2.639-.833-3.284-1.279v-4.587c.937.845 2.17 1.552 3.699 2.121s2.954.853 4.276.853c4.241 0 6.361-1.652 6.361-4.956 0-1.383-.453-2.57-1.36-3.561-.907-.991-2.766-2.294-5.578-3.907-2.719-1.536-4.625-2.996-5.716-4.379-1.091-1.383-1.637-3.065-1.637-5.048 0-2.612.976-4.736 2.927-6.373 1.951-1.637 4.472-2.455 7.56-2.455 2.965 0 5.132.392 6.5 1.176v4.333c-1.721-1.352-3.957-2.028-6.707-2.028-1.829 0-3.323.457-4.483 1.371-1.16.914-1.74 2.124-1.74 3.63 0 1.091.173 1.967.519 2.627.346.661.93 1.314 1.752 1.959.822.646 2.209 1.514 4.16 2.604 2.919 1.629 4.963 3.166 6.131 4.61 1.167 1.446 1.751 3.105 1.751 4.98zm15.151 8.113c-.907.507-2.09.761-3.549.761-4.118 0-6.177-2.32-6.177-6.961v-13.967h-4.057v-3.204h4.057v-5.762l3.78-1.221v6.983h5.946v3.204h-5.946v13.322c0 1.583.269 2.709.807 3.377.538.668 1.437 1.003 2.697 1.003.937 0 1.752-.254 2.443-.761v3.226zm22.793.231h-3.78v-3.734h-.092c-1.567 2.873-3.987 4.31-7.26 4.31-5.639 0-8.459-3.357-8.459-10.072v-14.106h3.78v13.507c0 4.964 1.905 7.444 5.716 7.444 1.874 0 3.396-.68 4.563-2.04 1.168-1.36 1.752-3.13 1.752-5.313v-13.598h3.78v23.602zm25.871 0h-3.78v-4.011h-.092c-1.752 3.058-4.456 4.587-8.113 4.587-2.981 0-5.355-1.071-7.122-3.215-1.767-2.143-2.651-5.005-2.651-8.586 0-3.902.98-7.037 2.939-9.404 1.959-2.366 4.583-3.549 7.871-3.549 3.227 0 5.585 1.276 7.076 3.826h.092v-14.59h3.78v34.942zm-3.78-10.672v-3.48c0-1.951-.65-3.572-1.948-4.863-1.299-1.291-2.878-1.936-4.737-1.936-2.274 0-4.079.841-5.416 2.524s-2.005 4.015-2.005 6.995c0 2.705.63 4.844 1.89 6.419 1.26 1.575 2.958 2.363 5.094 2.363 2.074 0 3.78-.752 5.117-2.258 1.337-1.508 2.005-3.428 2.005-5.764zm13.282 10.672h-3.78v-23.602h3.78v23.602zm27.536-11.893c0 3.749-1.064 6.765-3.192 9.047-2.128 2.282-4.982 3.423-8.563 3.423-3.488 0-6.273-1.11-8.355-3.33-2.082-2.22-3.123-5.143-3.123-8.77 0-3.903 1.068-6.987 3.204-9.254 2.135-2.266 5.078-3.4 8.828-3.4 3.503 0 6.246 1.095 8.228 3.285 1.982 2.188 2.973 5.188 2.973 8.999zm-3.872.138c0-2.965-.657-5.24-1.971-6.823-1.314-1.582-3.192-2.374-5.635-2.374-2.428 0-4.349.811-5.762 2.432-1.414 1.621-2.12 3.906-2.12 6.857 0 2.828.71 5.036 2.132 6.626 1.421 1.59 3.338 2.385 5.751 2.385 2.458 0 4.341-.784 5.647-2.351 1.304-1.566 1.958-3.817 1.958-6.752zm-266.807-32.32l-21.866 21.866-13.946-10.847-5.509 2.754v27.547l5.509 2.755 13.946-10.848 21.866 21.866 13.774-5.509v-44.075l-13.774-5.509zm-35.812 35.811v-16.528l8.265 8.265-8.265 8.263zm21.251-8.263l14.561-11.326v22.651l-14.561-11.325z" fill="#fff"/><rect x="548.5" y="61" fill="#fff" width="1" height="74"/></svg>


--------------------------------------------------------------------------------
/PwnedPasswords.sln:
--------------------------------------------------------------------------------
  1 | 
  2 | Microsoft Visual Studio Solution File, Format Version 12.00
  3 | # Visual Studio Version 16
  4 | VisualStudioVersion = 16.0.29324.140
  5 | MinimumVisualStudioVersion = 15.0.26124.0
  6 | Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "src", "src", "{3712440E-2E50-42DA-BDB1-4D240172359F}"
  7 | EndProject
  8 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PwnedPasswords.Client", "src\PwnedPasswords.Client\PwnedPasswords.Client.csproj", "{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}"
  9 | EndProject
 10 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PwnedPasswords.Validator", "src\PwnedPasswords.Validator\PwnedPasswords.Validator.csproj", "{6F629851-3449-480F-A0A2-6731D293E749}"
 11 | EndProject
 12 | Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "test", "test", "{CADB1B5D-E7F9-4812-B1A2-11128746E36E}"
 13 | EndProject
 14 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PwnedPasswords.Client.Test", "test\PwnedPasswords.Client.Test\PwnedPasswords.Client.Test.csproj", "{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}"
 15 | EndProject
 16 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PwnedPasswords.Validator.Test", "test\PwnedPasswords.Validator.Test\PwnedPasswords.Validator.Test.csproj", "{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}"
 17 | EndProject
 18 | Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "samples", "samples", "{2C611B7D-B0DA-4FA2-8471-A6241D4A7505}"
 19 | EndProject
 20 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PwnedPasswords.Sample", "samples\PwnedPasswords.Sample\PwnedPasswords.Sample.csproj", "{C9154973-2596-42C4-BA75-8511968C94D0}"
 21 | EndProject
 22 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PwnedPasswords.Sample.NetCore3", "samples\PwnedPasswords.Sample.NetCore3\PwnedPasswords.Sample.NetCore3.csproj", "{51475B16-AE8D-4049-824F-C7D4DFBB2353}"
 23 | EndProject
 24 | Global
 25 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 26 | 		Debug|Any CPU = Debug|Any CPU
 27 | 		Debug|x64 = Debug|x64
 28 | 		Debug|x86 = Debug|x86
 29 | 		Release|Any CPU = Release|Any CPU
 30 | 		Release|x64 = Release|x64
 31 | 		Release|x86 = Release|x86
 32 | 	EndGlobalSection
 33 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
 34 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 35 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Debug|Any CPU.Build.0 = Debug|Any CPU
 36 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Debug|x64.ActiveCfg = Debug|Any CPU
 37 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Debug|x64.Build.0 = Debug|Any CPU
 38 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Debug|x86.ActiveCfg = Debug|Any CPU
 39 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Debug|x86.Build.0 = Debug|Any CPU
 40 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Release|Any CPU.ActiveCfg = Release|Any CPU
 41 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Release|Any CPU.Build.0 = Release|Any CPU
 42 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Release|x64.ActiveCfg = Release|Any CPU
 43 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Release|x64.Build.0 = Release|Any CPU
 44 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Release|x86.ActiveCfg = Release|Any CPU
 45 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6}.Release|x86.Build.0 = Release|Any CPU
 46 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 47 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Debug|Any CPU.Build.0 = Debug|Any CPU
 48 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Debug|x64.ActiveCfg = Debug|Any CPU
 49 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Debug|x64.Build.0 = Debug|Any CPU
 50 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Debug|x86.ActiveCfg = Debug|Any CPU
 51 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Debug|x86.Build.0 = Debug|Any CPU
 52 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Release|Any CPU.ActiveCfg = Release|Any CPU
 53 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Release|Any CPU.Build.0 = Release|Any CPU
 54 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Release|x64.ActiveCfg = Release|Any CPU
 55 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Release|x64.Build.0 = Release|Any CPU
 56 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Release|x86.ActiveCfg = Release|Any CPU
 57 | 		{6F629851-3449-480F-A0A2-6731D293E749}.Release|x86.Build.0 = Release|Any CPU
 58 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 59 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Debug|Any CPU.Build.0 = Debug|Any CPU
 60 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Debug|x64.ActiveCfg = Debug|Any CPU
 61 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Debug|x64.Build.0 = Debug|Any CPU
 62 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Debug|x86.ActiveCfg = Debug|Any CPU
 63 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Debug|x86.Build.0 = Debug|Any CPU
 64 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Release|Any CPU.ActiveCfg = Release|Any CPU
 65 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Release|Any CPU.Build.0 = Release|Any CPU
 66 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Release|x64.ActiveCfg = Release|Any CPU
 67 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Release|x64.Build.0 = Release|Any CPU
 68 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Release|x86.ActiveCfg = Release|Any CPU
 69 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8}.Release|x86.Build.0 = Release|Any CPU
 70 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 71 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Debug|Any CPU.Build.0 = Debug|Any CPU
 72 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Debug|x64.ActiveCfg = Debug|Any CPU
 73 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Debug|x64.Build.0 = Debug|Any CPU
 74 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Debug|x86.ActiveCfg = Debug|Any CPU
 75 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Debug|x86.Build.0 = Debug|Any CPU
 76 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Release|Any CPU.ActiveCfg = Release|Any CPU
 77 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Release|Any CPU.Build.0 = Release|Any CPU
 78 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Release|x64.ActiveCfg = Release|Any CPU
 79 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Release|x64.Build.0 = Release|Any CPU
 80 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Release|x86.ActiveCfg = Release|Any CPU
 81 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A}.Release|x86.Build.0 = Release|Any CPU
 82 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 83 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Debug|Any CPU.Build.0 = Debug|Any CPU
 84 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Debug|x64.ActiveCfg = Debug|Any CPU
 85 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Debug|x64.Build.0 = Debug|Any CPU
 86 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Debug|x86.ActiveCfg = Debug|Any CPU
 87 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Debug|x86.Build.0 = Debug|Any CPU
 88 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Release|Any CPU.ActiveCfg = Release|Any CPU
 89 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Release|Any CPU.Build.0 = Release|Any CPU
 90 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Release|x64.ActiveCfg = Release|Any CPU
 91 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Release|x64.Build.0 = Release|Any CPU
 92 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Release|x86.ActiveCfg = Release|Any CPU
 93 | 		{C9154973-2596-42C4-BA75-8511968C94D0}.Release|x86.Build.0 = Release|Any CPU
 94 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 95 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Debug|Any CPU.Build.0 = Debug|Any CPU
 96 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Debug|x64.ActiveCfg = Debug|Any CPU
 97 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Debug|x64.Build.0 = Debug|Any CPU
 98 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Debug|x86.ActiveCfg = Debug|Any CPU
 99 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Debug|x86.Build.0 = Debug|Any CPU
100 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Release|Any CPU.ActiveCfg = Release|Any CPU
101 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Release|Any CPU.Build.0 = Release|Any CPU
102 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Release|x64.ActiveCfg = Release|Any CPU
103 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Release|x64.Build.0 = Release|Any CPU
104 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Release|x86.ActiveCfg = Release|Any CPU
105 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353}.Release|x86.Build.0 = Release|Any CPU
106 | 	EndGlobalSection
107 | 	GlobalSection(SolutionProperties) = preSolution
108 | 		HideSolutionNode = FALSE
109 | 	EndGlobalSection
110 | 	GlobalSection(NestedProjects) = preSolution
111 | 		{22C77F4E-753C-4414-ACB9-8E4FD80F55A6} = {3712440E-2E50-42DA-BDB1-4D240172359F}
112 | 		{6F629851-3449-480F-A0A2-6731D293E749} = {3712440E-2E50-42DA-BDB1-4D240172359F}
113 | 		{5C41A64B-5EC9-4B62-9027-8C8BC5FFE4B8} = {CADB1B5D-E7F9-4812-B1A2-11128746E36E}
114 | 		{EF8E6A29-F32D-4D03-B95F-2CB08D05781A} = {CADB1B5D-E7F9-4812-B1A2-11128746E36E}
115 | 		{C9154973-2596-42C4-BA75-8511968C94D0} = {2C611B7D-B0DA-4FA2-8471-A6241D4A7505}
116 | 		{51475B16-AE8D-4049-824F-C7D4DFBB2353} = {2C611B7D-B0DA-4FA2-8471-A6241D4A7505}
117 | 	EndGlobalSection
118 | 	GlobalSection(ExtensibilityGlobals) = postSolution
119 | 		SolutionGuid = {85963CC3-8EC6-4B45-BB6D-66ECF78FFD47}
120 | 	EndGlobalSection
121 | EndGlobal
122 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Data/Migrations/ApplicationDbContextModelSnapshot.cs:
--------------------------------------------------------------------------------
  1 | // <auto-generated />
  2 | using System;
  3 | using PwnedPasswords.Sample.Data;
  4 | using Microsoft.EntityFrameworkCore;
  5 | using Microsoft.EntityFrameworkCore.Infrastructure;
  6 | using Microsoft.EntityFrameworkCore.Metadata;
  7 | using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
  8 | 
  9 | namespace PwnedPasswords.Sample.Data.Migrations
 10 | {
 11 |     [DbContext(typeof(ApplicationDbContext))]
 12 |     partial class ApplicationDbContextModelSnapshot : ModelSnapshot
 13 |     {
 14 |         protected override void BuildModel(ModelBuilder modelBuilder)
 15 |         {
 16 | #pragma warning disable 612, 618
 17 |             modelBuilder
 18 |                 .HasAnnotation("ProductVersion", "2.1.0")
 19 |                 .HasAnnotation("Relational:MaxIdentifierLength", 128)
 20 |                 .HasAnnotation("SqlServer:ValueGenerationStrategy", SqlServerValueGenerationStrategy.IdentityColumn);
 21 | 
 22 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
 23 |                 {
 24 |                     b.Property<string>("Id")
 25 |                         .ValueGeneratedOnAdd();
 26 | 
 27 |                     b.Property<string>("ConcurrencyStamp")
 28 |                         .IsConcurrencyToken();
 29 | 
 30 |                     b.Property<string>("Name")
 31 |                         .HasMaxLength(256);
 32 | 
 33 |                     b.Property<string>("NormalizedName")
 34 |                         .HasMaxLength(256);
 35 | 
 36 |                     b.HasKey("Id");
 37 | 
 38 |                     b.HasIndex("NormalizedName")
 39 |                         .IsUnique()
 40 |                         .HasName("RoleNameIndex")
 41 |                         .HasFilter("[NormalizedName] IS NOT NULL");
 42 | 
 43 |                     b.ToTable("AspNetRoles");
 44 |                 });
 45 | 
 46 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
 47 |                 {
 48 |                     b.Property<int>("Id")
 49 |                         .ValueGeneratedOnAdd()
 50 |                         .HasAnnotation("SqlServer:ValueGenerationStrategy", SqlServerValueGenerationStrategy.IdentityColumn);
 51 | 
 52 |                     b.Property<string>("ClaimType");
 53 | 
 54 |                     b.Property<string>("ClaimValue");
 55 | 
 56 |                     b.Property<string>("RoleId")
 57 |                         .IsRequired();
 58 | 
 59 |                     b.HasKey("Id");
 60 | 
 61 |                     b.HasIndex("RoleId");
 62 | 
 63 |                     b.ToTable("AspNetRoleClaims");
 64 |                 });
 65 | 
 66 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUser", b =>
 67 |                 {
 68 |                     b.Property<string>("Id")
 69 |                         .ValueGeneratedOnAdd();
 70 | 
 71 |                     b.Property<int>("AccessFailedCount");
 72 | 
 73 |                     b.Property<string>("ConcurrencyStamp")
 74 |                         .IsConcurrencyToken();
 75 | 
 76 |                     b.Property<string>("Email")
 77 |                         .HasMaxLength(256);
 78 | 
 79 |                     b.Property<bool>("EmailConfirmed");
 80 | 
 81 |                     b.Property<bool>("LockoutEnabled");
 82 | 
 83 |                     b.Property<DateTimeOffset?>("LockoutEnd");
 84 | 
 85 |                     b.Property<string>("NormalizedEmail")
 86 |                         .HasMaxLength(256);
 87 | 
 88 |                     b.Property<string>("NormalizedUserName")
 89 |                         .HasMaxLength(256);
 90 | 
 91 |                     b.Property<string>("PasswordHash");
 92 | 
 93 |                     b.Property<string>("PhoneNumber");
 94 | 
 95 |                     b.Property<bool>("PhoneNumberConfirmed");
 96 | 
 97 |                     b.Property<string>("SecurityStamp");
 98 | 
 99 |                     b.Property<bool>("TwoFactorEnabled");
100 | 
101 |                     b.Property<string>("UserName")
102 |                         .HasMaxLength(256);
103 | 
104 |                     b.HasKey("Id");
105 | 
106 |                     b.HasIndex("NormalizedEmail")
107 |                         .HasName("EmailIndex");
108 | 
109 |                     b.HasIndex("NormalizedUserName")
110 |                         .IsUnique()
111 |                         .HasName("UserNameIndex")
112 |                         .HasFilter("[NormalizedUserName] IS NOT NULL");
113 | 
114 |                     b.ToTable("AspNetUsers");
115 |                 });
116 | 
117 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
118 |                 {
119 |                     b.Property<int>("Id")
120 |                         .ValueGeneratedOnAdd()
121 |                         .HasAnnotation("SqlServer:ValueGenerationStrategy", SqlServerValueGenerationStrategy.IdentityColumn);
122 | 
123 |                     b.Property<string>("ClaimType");
124 | 
125 |                     b.Property<string>("ClaimValue");
126 | 
127 |                     b.Property<string>("UserId")
128 |                         .IsRequired();
129 | 
130 |                     b.HasKey("Id");
131 | 
132 |                     b.HasIndex("UserId");
133 | 
134 |                     b.ToTable("AspNetUserClaims");
135 |                 });
136 | 
137 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
138 |                 {
139 |                     b.Property<string>("LoginProvider")
140 |                         .HasMaxLength(128);
141 | 
142 |                     b.Property<string>("ProviderKey")
143 |                         .HasMaxLength(128);
144 | 
145 |                     b.Property<string>("ProviderDisplayName");
146 | 
147 |                     b.Property<string>("UserId")
148 |                         .IsRequired();
149 | 
150 |                     b.HasKey("LoginProvider", "ProviderKey");
151 | 
152 |                     b.HasIndex("UserId");
153 | 
154 |                     b.ToTable("AspNetUserLogins");
155 |                 });
156 | 
157 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
158 |                 {
159 |                     b.Property<string>("UserId");
160 | 
161 |                     b.Property<string>("RoleId");
162 | 
163 |                     b.HasKey("UserId", "RoleId");
164 | 
165 |                     b.HasIndex("RoleId");
166 | 
167 |                     b.ToTable("AspNetUserRoles");
168 |                 });
169 | 
170 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
171 |                 {
172 |                     b.Property<string>("UserId");
173 | 
174 |                     b.Property<string>("LoginProvider")
175 |                         .HasMaxLength(128);
176 | 
177 |                     b.Property<string>("Name")
178 |                         .HasMaxLength(128);
179 | 
180 |                     b.Property<string>("Value");
181 | 
182 |                     b.HasKey("UserId", "LoginProvider", "Name");
183 | 
184 |                     b.ToTable("AspNetUserTokens");
185 |                 });
186 | 
187 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
188 |                 {
189 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole")
190 |                         .WithMany()
191 |                         .HasForeignKey("RoleId")
192 |                         .OnDelete(DeleteBehavior.Cascade);
193 |                 });
194 | 
195 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
196 |                 {
197 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
198 |                         .WithMany()
199 |                         .HasForeignKey("UserId")
200 |                         .OnDelete(DeleteBehavior.Cascade);
201 |                 });
202 | 
203 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
204 |                 {
205 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
206 |                         .WithMany()
207 |                         .HasForeignKey("UserId")
208 |                         .OnDelete(DeleteBehavior.Cascade);
209 |                 });
210 | 
211 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
212 |                 {
213 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole")
214 |                         .WithMany()
215 |                         .HasForeignKey("RoleId")
216 |                         .OnDelete(DeleteBehavior.Cascade);
217 | 
218 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
219 |                         .WithMany()
220 |                         .HasForeignKey("UserId")
221 |                         .OnDelete(DeleteBehavior.Cascade);
222 |                 });
223 | 
224 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
225 |                 {
226 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
227 |                         .WithMany()
228 |                         .HasForeignKey("UserId")
229 |                         .OnDelete(DeleteBehavior.Cascade);
230 |                 });
231 | #pragma warning restore 612, 618
232 |         }
233 |     }
234 | }
235 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/wwwroot/images/banner1.svg:
--------------------------------------------------------------------------------
1 | <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1140 360" enable-background="new 0 0 1140 360"><path fill="#56B4D9" d="M0 0h1140v360h-1140v-360z"/><path fill="#fff" d="M163.29 114.514h-3.996l-3.266-8.637h-13.063l-3.072 8.637h-4.018l11.816-30.809h3.738l11.861 30.809zm-8.443-11.881l-4.834-13.127c-.158-.43-.315-1.117-.473-2.063h-.086c-.144.874-.308 1.562-.494 2.063l-4.791 13.127h10.678zm10.921 10.635v-4.254c.487.43 1.07.816 1.751 1.16.68.344 1.396.634 2.148.87s1.507.419 2.267.548c.759.129 1.461.193 2.105.193 2.22 0 3.878-.412 4.974-1.235s1.644-2.009 1.644-3.556c0-.831-.183-1.554-.548-2.17s-.87-1.178-1.515-1.687-1.407-.995-2.288-1.461-1.83-.956-2.847-1.472c-1.074-.544-2.077-1.096-3.008-1.654-.931-.559-1.74-1.175-2.428-1.848s-1.229-1.436-1.622-2.288c-.394-.853-.591-1.852-.591-2.997 0-1.403.308-2.625.924-3.663.616-1.038 1.425-1.895 2.428-2.567 1.002-.673 2.145-1.175 3.427-1.504 1.282-.329 2.589-.494 3.921-.494 3.036 0 5.249.365 6.639 1.096v4.061c-1.819-1.261-4.154-1.891-7.004-1.891-.788 0-1.576.082-2.363.247-.788.165-1.49.434-2.105.806-.616.372-1.117.853-1.504 1.439s-.58 1.304-.58 2.148c0 .788.146 1.468.44 2.041.293.573.727 1.096 1.3 1.568.573.473 1.271.931 2.095 1.375.823.444 1.772.931 2.847 1.461 1.103.544 2.148 1.117 3.137 1.719s1.854 1.268 2.6 1.998c.745.73 1.335 1.54 1.772 2.428.437.888.655 1.905.655 3.051 0 1.519-.297 2.804-.892 3.856-.595 1.053-1.396 1.908-2.406 2.567s-2.174 1.135-3.491 1.429c-1.318.293-2.707.44-4.168.44-.487 0-1.089-.04-1.805-.118-.716-.079-1.447-.193-2.191-.344-.745-.15-1.45-.337-2.116-.559s-1.202-.467-1.602-.739zm27.808-10.399v11.645h-3.609v-30.809h8.465c3.294 0 5.847.802 7.659 2.406 1.812 1.604 2.718 3.867 2.718 6.789s-1.006 5.313-3.019 7.176c-2.013 1.862-4.73 2.793-8.153 2.793h-4.061zm0-15.898v12.633h3.781c2.492 0 4.394-.569 5.704-1.708s1.966-2.746 1.966-4.823c0-4.067-2.406-6.102-7.219-6.102h-4.232zm21.169 28.015c-.659 0-1.221-.236-1.687-.709-.466-.473-.698-1.038-.698-1.697s.232-1.229.698-1.708c.465-.479 1.027-.72 1.687-.72.673 0 1.246.24 1.719.72s.709 1.049.709 1.708-.236 1.225-.709 1.697-1.047.709-1.719.709zm33.007-.472h-4.426l-15.855-24.557c-.401-.616-.73-1.261-.988-1.934h-.129c.114.659.172 2.069.172 4.232v22.258h-3.609v-30.808h4.684l15.426 24.17c.645 1.003 1.06 1.69 1.246 2.063h.086c-.144-.888-.215-2.399-.215-4.533v-21.7h3.609v30.809zm23.79 0h-16.328v-30.809h15.641v3.266h-12.031v10.248h11.129v3.244h-11.129v10.785h12.719v3.266zm23.533-27.543h-8.895v27.543h-3.609v-27.543h-8.873v-3.266h21.377v3.266zm36.623 26.254c-2.277 1.203-5.113 1.805-8.508 1.805-4.383 0-7.892-1.411-10.527-4.232-2.636-2.821-3.953-6.524-3.953-11.107 0-4.927 1.482-8.909 4.447-11.945s6.725-4.555 11.279-4.555c2.922 0 5.342.423 7.262 1.268v3.846c-2.206-1.231-4.641-1.848-7.305-1.848-3.538 0-6.406 1.182-8.604 3.545-2.199 2.363-3.298 5.521-3.298 9.475 0 3.753 1.027 6.742 3.083 8.97 2.055 2.228 4.751 3.341 8.089 3.341 3.094 0 5.772-.688 8.035-2.063v3.5zm14.38 1.804c-3.251 0-5.848-1.027-7.788-3.083-1.941-2.056-2.911-4.78-2.911-8.175 0-3.695 1.01-6.581 3.029-8.658s4.748-3.115 8.186-3.115c3.28 0 5.84 1.01 7.681 3.029 1.84 2.02 2.761 4.819 2.761 8.4 0 3.509-.992 6.32-2.976 8.433-1.984 2.113-4.645 3.169-7.982 3.169zm.258-20.066c-2.263 0-4.054.77-5.371 2.31-1.318 1.54-1.977 3.663-1.977 6.37 0 2.606.666 4.662 1.998 6.166s3.115 2.256 5.35 2.256c2.277 0 4.028-.737 5.253-2.213s1.837-3.573 1.837-6.295c0-2.75-.612-4.87-1.837-6.359s-2.976-2.235-5.253-2.235zm27.185 1.117c-.616-.473-1.504-.709-2.664-.709-1.504 0-2.761.709-3.771 2.127s-1.515 3.352-1.515 5.801v11.215h-3.523v-22h3.523v4.533h.086c.501-1.547 1.268-2.754 2.299-3.62s2.184-1.3 3.459-1.3c.917 0 1.618.101 2.105.301v3.652zm20.89 8.315h-15.533c.057 2.449.716 4.34 1.977 5.672 1.26 1.332 2.993 1.998 5.199 1.998 2.478 0 4.755-.816 6.832-2.449v3.309c-1.934 1.403-4.49 2.105-7.67 2.105-3.108 0-5.55-.999-7.326-2.997-1.776-1.998-2.664-4.809-2.664-8.433 0-3.423.97-6.213 2.911-8.368 1.94-2.155 4.351-3.233 7.229-3.233s5.106.931 6.682 2.793c1.575 1.862 2.363 4.447 2.363 7.756v1.847zm-3.61-2.987c-.015-2.034-.505-3.616-1.472-4.748s-2.31-1.697-4.028-1.697c-1.662 0-3.072.595-4.232 1.783s-1.876 2.743-2.148 4.662h11.88zm40.699-39.408h-1v74h1v-74zm83.592 54.095h-1.842l-7.165-24.235c-.359-1.243-.562-2.253-.606-3.032h-.09c-.045.659-.277 1.655-.696 2.987l-7.637 24.28h-1.842l-9.568-32.209h2.493l7.345 25.808c.329 1.168.562 2.119.696 2.853h.09c.09-.554.352-1.505.786-2.853l7.951-25.808h1.123l7.3 25.808c.344 1.198.576 2.149.696 2.853h.09c.075-.419.194-.898.359-1.438l7.547-27.223h2.403l-9.433 32.209zm14.445-28.795c-.449 0-.846-.165-1.19-.494-.345-.329-.517-.749-.517-1.258 0-.494.176-.895.528-1.202.352-.307.745-.46 1.179-.46.464 0 .872.15 1.224.449.352.3.528.704.528 1.213 0 .479-.172.891-.517 1.235-.344.345-.756.517-1.235.517zm-1.011 28.795v-23h2.066v23h-2.066zm24.239 0v-13.387c0-5.525-1.992-8.288-5.975-8.288-2.216 0-4.036.813-5.458 2.437-1.423 1.625-2.134 3.635-2.134 6.031v13.207h-2.066v-23h2.066v4.178h.09c1.677-3.159 4.297-4.739 7.861-4.739 2.485 0 4.387.828 5.705 2.482 1.317 1.655 1.977 4.017 1.977 7.086v13.993h-2.066zm24.485 0v-4.178h-.09c-.748 1.453-1.855 2.605-3.324 3.459-1.467.854-3.122 1.28-4.963 1.28-2.83 0-5.14-1.033-6.929-3.1-1.79-2.066-2.684-4.919-2.684-8.558 0-3.713.977-6.719 2.931-9.018 1.954-2.298 4.488-3.448 7.603-3.448 3.445 0 5.9 1.415 7.367 4.245h.09v-14.733h2.066v34.051h-2.067zm0-13.993c0-2.141-.678-3.957-2.031-5.447-1.355-1.49-3.18-2.235-5.47-2.235-2.411 0-4.402.925-5.975 2.774-1.572 1.85-2.358 4.391-2.358 7.625 0 3.175.708 5.626 2.123 7.356s3.238 2.594 5.469 2.594c2.62 0 4.649-.812 6.086-2.437 1.438-1.625 2.156-3.605 2.156-5.941v-4.289zm17.838 14.554c-3.354 0-6.009-1.104-7.962-3.313-1.955-2.208-2.932-5.08-2.932-8.614 0-3.818 1.021-6.806 3.066-8.962 2.043-2.156 4.735-3.234 8.074-3.234 3.279 0 5.87 1.071 7.771 3.212 1.901 2.142 2.853 5.106 2.853 8.895 0 3.579-.97 6.477-2.909 8.692-1.938 2.216-4.592 3.324-7.961 3.324zm.157-22.236c-2.71 0-4.87.914-6.48 2.74-1.609 1.827-2.414 4.365-2.414 7.614 0 3.01.786 5.428 2.358 7.255s3.721 2.74 6.446 2.74c2.771 0 4.904-.898 6.401-2.695s2.246-4.29 2.246-7.479c0-3.279-.745-5.795-2.235-7.547-1.489-1.752-3.596-2.628-6.322-2.628zm35.087 21.675h-1.932l-5.009-17.34c-.135-.479-.255-1.123-.359-1.932h-.112c-.03.345-.18.974-.449 1.887l-5.615 17.385h-1.932l-6.94-23h2.291l5.346 18.351c.135.479.239 1.123.314 1.932h.18c.03-.434.172-1.078.427-1.932l5.84-18.351h1.415l5.211 18.351c.12.435.225 1.078.314 1.932h.18c0-.434.127-1.078.382-1.932l5.458-18.351h2.134l-7.144 23zm9.616-1.011v-2.493c.778.674 1.722 1.206 2.83 1.595 1.108.39 2.066.584 2.875.584 3.608 0 5.413-1.475 5.413-4.425 0-1.018-.396-1.887-1.19-2.605s-2.081-1.46-3.863-2.224c-2.201-.958-3.747-1.95-4.638-2.976-.892-1.025-1.337-2.272-1.337-3.74 0-1.872.715-3.384 2.146-4.537 1.43-1.153 3.192-1.729 5.289-1.729 1.977 0 3.669.404 5.076 1.213v2.336c-1.707-1.108-3.474-1.662-5.301-1.662-1.513 0-2.732.393-3.661 1.179s-1.393 1.808-1.393 3.066c0 1.093.292 1.98.876 2.662.584.682 1.872 1.464 3.863 2.347 2.396 1.078 4.043 2.078 4.941 2.999s1.348 2.145 1.348 3.672c0 1.827-.686 3.335-2.055 4.526-1.371 1.19-3.261 1.786-5.672 1.786-2.215-.002-4.064-.526-5.547-1.574zm80.185 1.011v-32.209h2.224v30.188h12.915v2.021h-15.139zm20.802-28.795c-.449 0-.846-.165-1.19-.494-.345-.329-.517-.749-.517-1.258 0-.494.176-.895.528-1.202.352-.307.744-.46 1.179-.46.464 0 .872.15 1.224.449.353.3.528.704.528 1.213 0 .479-.172.891-.517 1.235-.345.345-.756.517-1.235.517zm-1.011 28.795v-23h2.066v23h-2.066zm24.238 0v-13.387c0-5.525-1.991-8.288-5.975-8.288-2.216 0-4.035.813-5.458 2.437-1.423 1.625-2.134 3.635-2.134 6.031v13.207h-2.066v-23h2.066v4.178h.09c1.677-3.159 4.298-4.739 7.861-4.739 2.485 0 4.388.828 5.705 2.482 1.317 1.655 1.977 4.017 1.977 7.086v13.993h-2.066zm23.34 0v-4.178h-.09c-1.603 3.16-4.073 4.739-7.412 4.739-5.436 0-8.153-3.421-8.153-10.265v-13.296h2.089v12.78c0 3.115.513 5.376 1.539 6.783 1.025 1.408 2.639 2.111 4.84 2.111 2.142 0 3.875-.786 5.199-2.358 1.326-1.572 1.988-3.668 1.988-6.289v-13.027h2.066v23h-2.066zm15.727-11.276l7.502 11.275h-2.628l-6.064-9.703h-.09l-.809 1.28c-.104.18-.232.382-.382.606l-5.076 7.816h-2.516l7.682-11.23-7.547-11.77h2.426l5.121 8.243c.659 1.063 1.056 1.722 1.19 1.977h.09l1.146-1.887 5.346-8.333h2.426l-7.817 11.726zm85.656 11.837c-4.552 0-8.18-1.512-10.883-4.537-2.702-3.024-4.054-6.955-4.054-11.792 0-5.136 1.389-9.25 4.167-12.342 2.777-3.092 6.569-4.638 11.376-4.638 4.343 0 7.857 1.486 10.546 4.458 2.688 2.973 4.031 6.87 4.031 11.691 0 5.331-1.378 9.523-4.133 12.578s-6.438 4.582-11.05 4.582zm.224-31.288c-3.743 0-6.824 1.355-9.242 4.065-2.419 2.71-3.628 6.259-3.628 10.646 0 4.433 1.146 7.962 3.437 10.59s5.346 3.942 9.164 3.942c3.983 0 7.135-1.299 9.456-3.897 2.321-2.598 3.481-6.218 3.481-10.86 0-4.552-1.135-8.104-3.402-10.658-2.27-2.551-5.357-3.828-9.266-3.828zm19.702 29.581v-2.538c2.306 1.468 4.642 2.201 7.008 2.201 2.516 0 4.425-.52 5.728-1.561s1.954-2.497 1.954-4.369c0-1.647-.438-2.961-1.313-3.942-.877-.98-2.774-2.317-5.694-4.009-3.265-1.901-5.331-3.493-6.199-4.773s-1.303-2.759-1.303-4.436c0-2.276.884-4.208 2.65-5.795 1.767-1.587 4.125-2.381 7.075-2.381 1.917 0 3.833.322 5.75.966v2.336c-1.887-.854-3.9-1.28-6.042-1.28-2.187 0-3.919.554-5.2 1.662-1.279 1.108-1.92 2.516-1.92 4.223 0 1.647.438 2.958 1.314 3.931.875.974 2.766 2.299 5.671 3.976 3.01 1.707 5.013 3.223 6.009 4.548.995 1.325 1.493 2.849 1.493 4.571 0 2.471-.857 4.485-2.571 6.042-1.715 1.558-4.137 2.336-7.267 2.336-1.108 0-2.385-.172-3.829-.517-1.446-.345-2.551-.742-3.314-1.191zm40.5 1.146l-7.412-12.286c-.464-.764-.861-1.512-1.19-2.246h-.112c-.404.824-.831 1.572-1.28 2.246l-7.547 12.286h-2.673l10.175-16.239-9.568-15.97h2.673l7.21 12.106c.374.629.764 1.348 1.168 2.156h.09l1.19-2.156 7.165-12.106h2.583l-9.658 15.925 9.883 16.284h-2.697z"/></svg>


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample/Data/Migrations/00000000000000_CreateIdentitySchema.Designer.cs:
--------------------------------------------------------------------------------
  1 | // <auto-generated />
  2 | using System;
  3 | using PwnedPasswords.Sample.Data;
  4 | using Microsoft.EntityFrameworkCore;
  5 | using Microsoft.EntityFrameworkCore.Infrastructure;
  6 | using Microsoft.EntityFrameworkCore.Metadata;
  7 | using Microsoft.EntityFrameworkCore.Migrations;
  8 | using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
  9 | 
 10 | namespace PwnedPasswords.Sample.Data.Migrations
 11 | {
 12 |     [DbContext(typeof(ApplicationDbContext))]
 13 |     [Migration("00000000000000_CreateIdentitySchema")]
 14 |     partial class CreateIdentitySchema
 15 |     {
 16 |         protected override void BuildTargetModel(ModelBuilder modelBuilder)
 17 |         {
 18 | #pragma warning disable 612, 618
 19 |             modelBuilder
 20 |                 .HasAnnotation("ProductVersion", "2.1.0")
 21 |                 .HasAnnotation("Relational:MaxIdentifierLength", 128)
 22 |                 .HasAnnotation("SqlServer:ValueGenerationStrategy", SqlServerValueGenerationStrategy.IdentityColumn);
 23 | 
 24 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
 25 |                 {
 26 |                     b.Property<string>("Id")
 27 |                         .ValueGeneratedOnAdd();
 28 | 
 29 |                     b.Property<string>("ConcurrencyStamp")
 30 |                         .IsConcurrencyToken();
 31 | 
 32 |                     b.Property<string>("Name")
 33 |                         .HasMaxLength(256);
 34 | 
 35 |                     b.Property<string>("NormalizedName")
 36 |                         .HasMaxLength(256);
 37 | 
 38 |                     b.HasKey("Id");
 39 | 
 40 |                     b.HasIndex("NormalizedName")
 41 |                         .IsUnique()
 42 |                         .HasName("RoleNameIndex")
 43 |                         .HasFilter("[NormalizedName] IS NOT NULL");
 44 | 
 45 |                     b.ToTable("AspNetRoles");
 46 |                 });
 47 | 
 48 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
 49 |                 {
 50 |                     b.Property<int>("Id")
 51 |                         .ValueGeneratedOnAdd()
 52 |                         .HasAnnotation("SqlServer:ValueGenerationStrategy", SqlServerValueGenerationStrategy.IdentityColumn);
 53 | 
 54 |                     b.Property<string>("ClaimType");
 55 | 
 56 |                     b.Property<string>("ClaimValue");
 57 | 
 58 |                     b.Property<string>("RoleId")
 59 |                         .IsRequired();
 60 | 
 61 |                     b.HasKey("Id");
 62 | 
 63 |                     b.HasIndex("RoleId");
 64 | 
 65 |                     b.ToTable("AspNetRoleClaims");
 66 |                 });
 67 | 
 68 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUser", b =>
 69 |                 {
 70 |                     b.Property<string>("Id")
 71 |                         .ValueGeneratedOnAdd();
 72 | 
 73 |                     b.Property<int>("AccessFailedCount");
 74 | 
 75 |                     b.Property<string>("ConcurrencyStamp")
 76 |                         .IsConcurrencyToken();
 77 | 
 78 |                     b.Property<string>("Email")
 79 |                         .HasMaxLength(256);
 80 | 
 81 |                     b.Property<bool>("EmailConfirmed");
 82 | 
 83 |                     b.Property<bool>("LockoutEnabled");
 84 | 
 85 |                     b.Property<DateTimeOffset?>("LockoutEnd");
 86 | 
 87 |                     b.Property<string>("NormalizedEmail")
 88 |                         .HasMaxLength(256);
 89 | 
 90 |                     b.Property<string>("NormalizedUserName")
 91 |                         .HasMaxLength(256);
 92 | 
 93 |                     b.Property<string>("PasswordHash");
 94 | 
 95 |                     b.Property<string>("PhoneNumber");
 96 | 
 97 |                     b.Property<bool>("PhoneNumberConfirmed");
 98 | 
 99 |                     b.Property<string>("SecurityStamp");
100 | 
101 |                     b.Property<bool>("TwoFactorEnabled");
102 | 
103 |                     b.Property<string>("UserName")
104 |                         .HasMaxLength(256);
105 | 
106 |                     b.HasKey("Id");
107 | 
108 |                     b.HasIndex("NormalizedEmail")
109 |                         .HasName("EmailIndex");
110 | 
111 |                     b.HasIndex("NormalizedUserName")
112 |                         .IsUnique()
113 |                         .HasName("UserNameIndex")
114 |                         .HasFilter("[NormalizedUserName] IS NOT NULL");
115 | 
116 |                     b.ToTable("AspNetUsers");
117 |                 });
118 | 
119 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
120 |                 {
121 |                     b.Property<int>("Id")
122 |                         .ValueGeneratedOnAdd()
123 |                         .HasAnnotation("SqlServer:ValueGenerationStrategy", SqlServerValueGenerationStrategy.IdentityColumn);
124 | 
125 |                     b.Property<string>("ClaimType");
126 | 
127 |                     b.Property<string>("ClaimValue");
128 | 
129 |                     b.Property<string>("UserId")
130 |                         .IsRequired();
131 | 
132 |                     b.HasKey("Id");
133 | 
134 |                     b.HasIndex("UserId");
135 | 
136 |                     b.ToTable("AspNetUserClaims");
137 |                 });
138 | 
139 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
140 |                 {
141 |                     b.Property<string>("LoginProvider")
142 |                         .HasMaxLength(128);
143 | 
144 |                     b.Property<string>("ProviderKey")
145 |                         .HasMaxLength(128);
146 | 
147 |                     b.Property<string>("ProviderDisplayName");
148 | 
149 |                     b.Property<string>("UserId")
150 |                         .IsRequired();
151 | 
152 |                     b.HasKey("LoginProvider", "ProviderKey");
153 | 
154 |                     b.HasIndex("UserId");
155 | 
156 |                     b.ToTable("AspNetUserLogins");
157 |                 });
158 | 
159 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
160 |                 {
161 |                     b.Property<string>("UserId");
162 | 
163 |                     b.Property<string>("RoleId");
164 | 
165 |                     b.HasKey("UserId", "RoleId");
166 | 
167 |                     b.HasIndex("RoleId");
168 | 
169 |                     b.ToTable("AspNetUserRoles");
170 |                 });
171 | 
172 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
173 |                 {
174 |                     b.Property<string>("UserId");
175 | 
176 |                     b.Property<string>("LoginProvider")
177 |                         .HasMaxLength(128);
178 | 
179 |                     b.Property<string>("Name")
180 |                         .HasMaxLength(128);
181 | 
182 |                     b.Property<string>("Value");
183 | 
184 |                     b.HasKey("UserId", "LoginProvider", "Name");
185 | 
186 |                     b.ToTable("AspNetUserTokens");
187 |                 });
188 | 
189 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
190 |                 {
191 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole")
192 |                         .WithMany()
193 |                         .HasForeignKey("RoleId")
194 |                         .OnDelete(DeleteBehavior.Cascade);
195 |                 });
196 | 
197 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
198 |                 {
199 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
200 |                         .WithMany()
201 |                         .HasForeignKey("UserId")
202 |                         .OnDelete(DeleteBehavior.Cascade);
203 |                 });
204 | 
205 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
206 |                 {
207 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
208 |                         .WithMany()
209 |                         .HasForeignKey("UserId")
210 |                         .OnDelete(DeleteBehavior.Cascade);
211 |                 });
212 | 
213 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
214 |                 {
215 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole")
216 |                         .WithMany()
217 |                         .HasForeignKey("RoleId")
218 |                         .OnDelete(DeleteBehavior.Cascade);
219 | 
220 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
221 |                         .WithMany()
222 |                         .HasForeignKey("UserId")
223 |                         .OnDelete(DeleteBehavior.Cascade);
224 |                 });
225 | 
226 |             modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
227 |                 {
228 |                     b.HasOne("Microsoft.AspNetCore.Identity.IdentityUser")
229 |                         .WithMany()
230 |                         .HasForeignKey("UserId")
231 |                         .OnDelete(DeleteBehavior.Cascade);
232 |                 });
233 | #pragma warning restore 612, 618
234 |         }
235 |     }
236 | }
237 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | ![PwnedPasswords logo](https://raw.githubusercontent.com/andrewlock/PwnedPasswords/master/logo.png)
  2 | 
  3 | *Pwned Passwords are hundreds of millions of real world passwords exposed in data breaches. This exposure makes them unsuitable for ongoing use as they're at much greater risk of being used to take over other accounts. They're searchable online below as well as being downloadable for use in other online system*
  4 | 
  5 | [![Build status](https://ci.appveyor.com/api/projects/status/xramjpbrgj36fwmr?svg=true)](https://ci.appveyor.com/project/andrewlock/PwnedPasswords)
  6 | 
  7 | [![client-nuget][client-nuget-badge]][client-nuget] [![validator-nuget][validator-nuget-badge]][validator-nuget]
  8 | 
  9 | [client-nuget]: https://www.nuget.org/packages/PwnedPasswords.Client/
 10 | [client-nuget-badge]: https://img.shields.io/nuget/v/PwnedPasswords.Client.svg?style=flat-square&label=PwnedPasswords.Client
 11 | 
 12 | [validator-nuget]: https://www.nuget.org/packages/PwnedPasswords.Validator/
 13 | [validator-nuget-badge]: https://img.shields.io/nuget/v/PwnedPasswords.Validator.svg?style=flat-square&label=PwnedPasswords.Validator
 14 | 
 15 | 
 16 | # [PwnedPasswords.Client](#PwnedPasswordsClient) and [PwnedPasswords.Validator](#PwnedPasswordsValidator)
 17 | 
 18 | This repository contains two libraries, _PwnedPasswords.Client_ and _PwnedPasswords.Validator_. 
 19 | 
 20 | * [PwnedPasswords.Client](#PwnedPasswordsClient) contains a [.NET Core 2.1 Typed HttpClient](https://blogs.msdn.microsoft.com/webdev/2018/02/28/asp-net-core-2-1-preview1-introducing-httpclient-factory/) (compatible with .NET Standard 2.0 and .NET Core 3.0) for accessing [Troy Hunt](https://twitter.com/troyhunt)'s [Have I Been Pwned passwords service](https://haveibeenpwned.com/Passwords).
 21 | * [PwnedPasswords.Validator](#PwnedPasswordsValidator) contains an implementation of an [ASP.NET Core Identity](https://docs.microsoft.com/en-us/aspnet/core/security/authentication/identity) `IPasswordValidator` that verifies the provided password has not been exposed in a known security breach.
 22 | 
 23 | ## Why should you care?
 24 | 
 25 | As per Troy Hunt's website:
 26 | 
 27 | >### Password reuse and credential stuffing
 28 | >Password reuse is normal. It's extremely risky, but it's so common because it's easy and people aren't aware of the potential impact. Attacks such as credential stuffing take advantage of reused credentials by automating login attempts against systems using known emails and password pairs.
 29 | 
 30 | > ### NIST's guidance: check passwords against those obtained from previous data breaches
 31 | > The Pwned Passwords service was created after NIST released guidance specifically recommending that user-provided passwords be checked against existing data breaches . The rationale for this advice and suggestions for how applications may leverage this data is described in detail in the blog post titled Introducing 306 Million Freely Downloadable Pwned Passwords.
 32 | 
 33 | This package provides an `IPasswordValidator` for ASP.NET Core Identity that checks whether the provided password appears on the have I been pwned list. 
 34 | 
 35 | 
 36 | 
 37 | ## PwnedPasswords.Client
 38 | 
 39 | .NET Core 2.1 introduces HTTPClient factory, an "opinionated factory for creating HttpClient instances". It allows easy configuration of `HttpClient` instances, manages their lifetime, and enables easy addition of common functionality, such as retry logic for transient HTTP errors.
 40 | 
 41 | _PwnedPasswords.Client_ provides the `IPwnedPasswordsClient` type, which can be used to easily access the PwnedPasswords API. It hooks into the _Microsoft.Extensions.DependencyInjection_ / ASP.NET Core DI container, and can be configured with optional fault handling etc as required.
 42 | 
 43 | ### Getting started
 44 | 
 45 | Install the [_PwnedPasswords.Client_ NuGet package](https://www.nuget.org/packages/_PwnedPasswords.Client) into your project using:
 46 | 
 47 | ```
 48 | dotnet add package PwnedPasswords.Client
 49 | ```
 50 | 
 51 | When you install the package, it should be added to your `csproj`. Alternatively, you can add it directly by adding:
 52 | 
 53 | ```xml
 54 | <PackageReference Include="PwnedPasswords.Client" Version="1.2.0" />
 55 | ```
 56 | 
 57 | 
 58 | Add to your dependency injection container in `Startup.ConfigureServices` using the `AddPwnedPasswordHttpClient()` extension method. You can further configure the `IHttpClientBuilder` to add fault handling for example.
 59 | 
 60 | ```csharp
 61 | public void ConfigureServices(IServiceCollection services)
 62 | {
 63 |     services.AddPwnedPasswordHttpClient()                      // add the client to the container
 64 |         .AddTransientHttpErrorPolicy(p => p.RetryAsync(3))     //configure the HttpClient used by the IPwnedPasswordsClient
 65 |         .AddPolicyHandler(Policy.TimeoutAsync<HttpResponseMessage>(TimeSpan.FromSeconds(2)));
 66 | 
 67 |     // other configuration
 68 | }
 69 | ```
 70 | 
 71 | You can also choose the minimum number of times a password must have appeared in a breach for it to be considered "pwned". So for example, if you only want to consider passwords that have appeared 20 times as pwned you can use the overload on `AddPwnedPasswordHttpClient()`:
 72 | 
 73 | 
 74 | ```csharp
 75 | public void ConfigureServices(IServiceCollection services)
 76 | {
 77 |     services.AddPwnedPasswordHttpClient(minimumFrequencyToConsiderPwned: 20);
 78 | }
 79 | ```
 80 | 
 81 | You can also configure this using the standard Options pattern in ASP.NET Core, for example by loading the required value from a JSON value.
 82 | 
 83 | ```csharp
 84 | public void ConfigureServices(IServiceCollection services)
 85 | {
 86 |     services.AddPwnedPasswordHttpClient();
 87 |     services.Configure<PwnedPasswordsClientOptions>(Configuration.GetSection("PwnedPasswords"));
 88 | }
 89 | ```
 90 | 
 91 | ## PwnedPasswords.Validator
 92 | 
 93 | _PwnedPasswords.Validator_ contains an implementation of an [ASP.NET Core Identity](https://docs.microsoft.com/en-us/aspnet/core/security/authentication/identity) `IPasswordValidator` that verifies the provided password has not been exposed in a known security breach.
 94 | 
 95 | 
 96 | ### Getting started
 97 | 
 98 | Install the [_PwnedPasswords.Validator_ NuGet package](https://www.nuget.org/packages/_PwnedPasswords.Validator_) into your project using:
 99 | 
100 | ```
101 | dotnet add package PwnedPasswords.Validator
102 | ```
103 | 
104 | When you install the package, it should be added to your `csproj`. Alternatively, you can add it directly by adding:
105 | 
106 | ```xml
107 | <PackageReference Include="PwnedPasswords.Validator" Version="1.2.0" />
108 | ```
109 | 
110 | You can add the PwnedPasswords ASP.NET Core Identity Validator to your `IdentityBuilder` in `Startup.ConfigureServices` using the `AddPwnedPasswordValidator()` extension method. 
111 | 
112 | ```csharp
113 | public void ConfigureServices(IServiceCollection services)
114 | {
115 |      services.AddDefaultIdentity<IdentityUser>()
116 |         .AddEntityFrameworkStores<ApplicationDbContext>()
117 |         .AddPwnedPasswordValidator<IdentityUser>(); // add the validator
118 | 
119 |     // other configuration
120 | }
121 | ```
122 | 
123 | As for the `PwnedPasswordsClient` library, you can customize the minimum number of times a password must have appeared in a breach for it to be considered invalid by the validator. For example:
124 | 
125 | ```csharp
126 | public void ConfigureServices(IServiceCollection services)
127 | {
128 |     services.AddDefaultIdentity<IdentityUser>()
129 |         .AddEntityFrameworkStores<ApplicationDbContext>()
130 |         .AddPwnedPasswordValidator<IdentityUser>(); // add the validator
131 | 
132 |     // set the minimum password to consider the password pwned
133 |     services.Configure<PwnedPasswordsClientOptions>(Configuration.GetSection("PwnedPasswords"));
134 | }
135 | ```
136 | 
137 | ### Customizing Error Messages
138 | 
139 | For simple scenarios, you can customize the error message for invalid passwords by configuring the validation options. For example:
140 | 
141 | ```csharp
142 | public void ConfigureServices(IServiceCollection services)
143 | {
144 |     services.AddDefaultIdentity<IdentityUser>()
145 |         .AddEntityFrameworkStores<ApplicationDbContext>()
146 |         .AddPwnedPasswordValidator<IdentityUser>(options => 
147 |             options.ErrorMessage = "My custom message"); // set the error message
148 | }
149 | ```
150 | 
151 | If you need more control over the message - for example, if you want to use the request culture to localize the message text - you can implement your own subclass of `PwnedPasswordErrorDescriber`. For example:
152 | 
153 | ```csharp
154 | public class CustomErrorDescriber : PwnedPasswordErrorDescriber
155 | {
156 |     public override IdentityError PwnedPassword()
157 |     {
158 |         return new IdentityError
159 |         {
160 |             Code = nameof(PwnedPassword),
161 |             Description = Resources.PwnedPasswordError
162 |         };
163 |     }
164 | }
165 | 
166 | ```
167 | 
168 | You can register your custom class by using the `AddPwnedPasswordErrorDescriber` extension method.
169 | 
170 | 
171 | ```csharp
172 | public void ConfigureServices(IServiceCollection services)
173 | {
174 |     services.AddDefaultIdentity<IdentityUser>()
175 |         .AddEntityFrameworkStores<ApplicationDbContext>()
176 |         .AddPwnedPasswordValidator<IdentityUser>()
177 |         .AddPwnedPasswordErrorDescriber<CustomErrorDescriber>();
178 | }
179 | ```
180 | 
181 | 
182 | ## Additional Resources
183 | * [Have I been pwned API](https://haveibeenpwned.com/Passwords)
184 | * [Password Rules Are Bullshit](https://blog.codinghorror.com/password-rules-are-bullshit/)
185 | * [Introduction to ASP.NET Core Identity](https://docs.microsoft.com/en-us/aspnet/core/security/authentication/identity)
186 | * [Steve Gordon's series on HttpClientFactory](https://www.stevejgordon.co.uk/introduction-to-httpclientfactory-aspnetcore)
187 | * [ASP.NET Core 2.1-preview1: Introducing HTTPClient factory](https://blogs.msdn.microsoft.com/webdev/2018/02/28/asp-net-core-2-1-preview1-introducing-httpclient-factory/)
188 | 


--------------------------------------------------------------------------------
/samples/PwnedPasswords.Sample.NetCore3/Data/Migrations/00000000000000_CreateIdentitySchema.cs:
--------------------------------------------------------------------------------
  1 | using System;
  2 | using Microsoft.EntityFrameworkCore.Migrations;
  3 | 
  4 | namespace PwnedPasswords.Sample.NetCore3.Data.Migrations
  5 | {
  6 |     public partial class CreateIdentitySchema : Migration
  7 |     {
  8 |         protected override void Up(MigrationBuilder migrationBuilder)
  9 |         {
 10 |             migrationBuilder.CreateTable(
 11 |                 name: "AspNetRoles",
 12 |                 columns: table => new
 13 |                 {
 14 |                     Id = table.Column<string>(nullable: false),
 15 |                     Name = table.Column<string>(maxLength: 256, nullable: true),
 16 |                     NormalizedName = table.Column<string>(maxLength: 256, nullable: true),
 17 |                     ConcurrencyStamp = table.Column<string>(nullable: true)
 18 |                 },
 19 |                 constraints: table =>
 20 |                 {
 21 |                     table.PrimaryKey("PK_AspNetRoles", x => x.Id);
 22 |                 });
 23 | 
 24 |             migrationBuilder.CreateTable(
 25 |                 name: "AspNetUsers",
 26 |                 columns: table => new
 27 |                 {
 28 |                     Id = table.Column<string>(nullable: false),
 29 |                     UserName = table.Column<string>(maxLength: 256, nullable: true),
 30 |                     NormalizedUserName = table.Column<string>(maxLength: 256, nullable: true),
 31 |                     Email = table.Column<string>(maxLength: 256, nullable: true),
 32 |                     NormalizedEmail = table.Column<string>(maxLength: 256, nullable: true),
 33 |                     EmailConfirmed = table.Column<bool>(nullable: false),
 34 |                     PasswordHash = table.Column<string>(nullable: true),
 35 |                     SecurityStamp = table.Column<string>(nullable: true),
 36 |                     ConcurrencyStamp = table.Column<string>(nullable: true),
 37 |                     PhoneNumber = table.Column<string>(nullable: true),
 38 |                     PhoneNumberConfirmed = table.Column<bool>(nullable: false),
 39 |                     TwoFactorEnabled = table.Column<bool>(nullable: false),
 40 |                     LockoutEnd = table.Column<DateTimeOffset>(nullable: true),
 41 |                     LockoutEnabled = table.Column<bool>(nullable: false),
 42 |                     AccessFailedCount = table.Column<int>(nullable: false)
 43 |                 },
 44 |                 constraints: table =>
 45 |                 {
 46 |                     table.PrimaryKey("PK_AspNetUsers", x => x.Id);
 47 |                 });
 48 | 
 49 |             migrationBuilder.CreateTable(
 50 |                 name: "AspNetRoleClaims",
 51 |                 columns: table => new
 52 |                 {
 53 |                     Id = table.Column<int>(nullable: false)
 54 |                         .Annotation("Sqlite:Autoincrement", true),
 55 |                     RoleId = table.Column<string>(nullable: false),
 56 |                     ClaimType = table.Column<string>(nullable: true),
 57 |                     ClaimValue = table.Column<string>(nullable: true)
 58 |                 },
 59 |                 constraints: table =>
 60 |                 {
 61 |                     table.PrimaryKey("PK_AspNetRoleClaims", x => x.Id);
 62 |                     table.ForeignKey(
 63 |                         name: "FK_AspNetRoleClaims_AspNetRoles_RoleId",
 64 |                         column: x => x.RoleId,
 65 |                         principalTable: "AspNetRoles",
 66 |                         principalColumn: "Id",
 67 |                         onDelete: ReferentialAction.Cascade);
 68 |                 });
 69 | 
 70 |             migrationBuilder.CreateTable(
 71 |                 name: "AspNetUserClaims",
 72 |                 columns: table => new
 73 |                 {
 74 |                     Id = table.Column<int>(nullable: false)
 75 |                         .Annotation("Sqlite:Autoincrement", true),
 76 |                     UserId = table.Column<string>(nullable: false),
 77 |                     ClaimType = table.Column<string>(nullable: true),
 78 |                     ClaimValue = table.Column<string>(nullable: true)
 79 |                 },
 80 |                 constraints: table =>
 81 |                 {
 82 |                     table.PrimaryKey("PK_AspNetUserClaims", x => x.Id);
 83 |                     table.ForeignKey(
 84 |                         name: "FK_AspNetUserClaims_AspNetUsers_UserId",
 85 |                         column: x => x.UserId,
 86 |                         principalTable: "AspNetUsers",
 87 |                         principalColumn: "Id",
 88 |                         onDelete: ReferentialAction.Cascade);
 89 |                 });
 90 | 
 91 |             migrationBuilder.CreateTable(
 92 |                 name: "AspNetUserLogins",
 93 |                 columns: table => new
 94 |                 {
 95 |                     LoginProvider = table.Column<string>(maxLength: 128, nullable: false),
 96 |                     ProviderKey = table.Column<string>(maxLength: 128, nullable: false),
 97 |                     ProviderDisplayName = table.Column<string>(nullable: true),
 98 |                     UserId = table.Column<string>(nullable: false)
 99 |                 },
100 |                 constraints: table =>
101 |                 {
102 |                     table.PrimaryKey("PK_AspNetUserLogins", x => new { x.LoginProvider, x.ProviderKey });
103 |                     table.ForeignKey(
104 |                         name: "FK_AspNetUserLogins_AspNetUsers_UserId",
105 |                         column: x => x.UserId,
106 |                         principalTable: "AspNetUsers",
107 |                         principalColumn: "Id",
108 |                         onDelete: ReferentialAction.Cascade);
109 |                 });
110 | 
111 |             migrationBuilder.CreateTable(
112 |                 name: "AspNetUserRoles",
113 |                 columns: table => new
114 |                 {
115 |                     UserId = table.Column<string>(nullable: false),
116 |                     RoleId = table.Column<string>(nullable: false)
117 |                 },
118 |                 constraints: table =>
119 |                 {
120 |                     table.PrimaryKey("PK_AspNetUserRoles", x => new { x.UserId, x.RoleId });
121 |                     table.ForeignKey(
122 |                         name: "FK_AspNetUserRoles_AspNetRoles_RoleId",
123 |                         column: x => x.RoleId,
124 |                         principalTable: "AspNetRoles",
125 |                         principalColumn: "Id",
126 |                         onDelete: ReferentialAction.Cascade);
127 |                     table.ForeignKey(
128 |                         name: "FK_AspNetUserRoles_AspNetUsers_UserId",
129 |                         column: x => x.UserId,
130 |                         principalTable: "AspNetUsers",
131 |                         principalColumn: "Id",
132 |                         onDelete: ReferentialAction.Cascade);
133 |                 });
134 | 
135 |             migrationBuilder.CreateTable(
136 |                 name: "AspNetUserTokens",
137 |                 columns: table => new
138 |                 {
139 |                     UserId = table.Column<string>(nullable: false),
140 |                     LoginProvider = table.Column<string>(maxLength: 128, nullable: false),
141 |                     Name = table.Column<string>(maxLength: 128, nullable: false),
142 |                     Value = table.Column<string>(nullable: true)
143 |                 },
144 |                 constraints: table =>
145 |                 {
146 |                     table.PrimaryKey("PK_AspNetUserTokens", x => new { x.UserId, x.LoginProvider, x.Name });
147 |                     table.ForeignKey(
148 |                         name: "FK_AspNetUserTokens_AspNetUsers_UserId",
149 |                         column: x => x.UserId,
150 |                         principalTable: "AspNetUsers",
151 |                         principalColumn: "Id",
152 |                         onDelete: ReferentialAction.Cascade);
153 |                 });
154 | 
155 |             migrationBuilder.CreateIndex(
156 |                 name: "IX_AspNetRoleClaims_RoleId",
157 |                 table: "AspNetRoleClaims",
158 |                 column: "RoleId");
159 | 
160 |             migrationBuilder.CreateIndex(
161 |                 name: "RoleNameIndex",
162 |                 table: "AspNetRoles",
163 |                 column: "NormalizedName",
164 |                 unique: true);
165 | 
166 |             migrationBuilder.CreateIndex(
167 |                 name: "IX_AspNetUserClaims_UserId",
168 |                 table: "AspNetUserClaims",
169 |                 column: "UserId");
170 | 
171 |             migrationBuilder.CreateIndex(
172 |                 name: "IX_AspNetUserLogins_UserId",
173 |                 table: "AspNetUserLogins",
174 |                 column: "UserId");
175 | 
176 |             migrationBuilder.CreateIndex(
177 |                 name: "IX_AspNetUserRoles_RoleId",
178 |                 table: "AspNetUserRoles",
179 |                 column: "RoleId");
180 | 
181 |             migrationBuilder.CreateIndex(
182 |                 name: "EmailIndex",
183 |                 table: "AspNetUsers",
184 |                 column: "NormalizedEmail");
185 | 
186 |             migrationBuilder.CreateIndex(
187 |                 name: "UserNameIndex",
188 |                 table: "AspNetUsers",
189 |                 column: "NormalizedUserName",
190 |                 unique: true);
191 |         }
192 | 
193 |         protected override void Down(MigrationBuilder migrationBuilder)
194 |         {
195 |             migrationBuilder.DropTable(
196 |                 name: "AspNetRoleClaims");
197 | 
198 |             migrationBuilder.DropTable(
199 |                 name: "AspNetUserClaims");
200 | 
201 |             migrationBuilder.DropTable(
202 |                 name: "AspNetUserLogins");
203 | 
204 |             migrationBuilder.DropTable(
205 |                 name: "AspNetUserRoles");
206 | 
207 |             migrationBuilder.DropTable(
208 |                 name: "AspNetUserTokens");
209 | 
210 |             migrationBuilder.DropTable(
211 |                 name: "AspNetRoles");
212 | 
213 |             migrationBuilder.DropTable(
214 |                 name: "AspNetUsers");
215 |         }
216 |     }
217 | }
218 | 


--------------------------------------------------------------------------------