Hello Support Team, I want to ask if ABP support below features for password policies :
1- Password must be changed every specific days (Password expiration). 2- Users shall not be able to re-use the previous 6 passwords (or any configurable number). (Password History) .
Best regards
Check the docs before asking a question: https://docs.abp.io/en/commercial/latest/ Check the samples to see the basic tasks: https://docs.abp.io/en/commercial/latest/samples/index The exact solution to your question may have been answered before, and please first use the search on the homepage. Provide us with the following info:
- ABP Framework version: v6.0.0
- UI Type: Angular
- Database System: EF Core (SQL Server)
- Auth Server Separated (for Angular): yes/no
- Exception message and full stack trace:
- Steps to reproduce the issue:
7 Answer(s)
-
0
hi
Password must be changed every specific days
This feature has been implemented in 7.2 https://docs.abp.io/en/commercial/latest/modules/identity/periodic-password-change
- Users shall not be able to re-use the previous 6 passwords (or any configurable number).
We don't know and don't store the plaintext password, So we may not implement this feature.
-
0
Hi , Thanks for your reply .
For the second part (Users shall not be able to re-use the previous 6 passwords (or any configurable number).) we will implement this features by saving the hashed passwords for every user. But where the best place to extend the password policies and add our logic for checking if the hashed password was used before ?
Best regards
-
0
hi
You can check the password history when the user changes its password.
ChangePasswordAsyncofProfileAppServiceResetPasswordAsyncofAccountAppService -
0
Hi, Can I extend the **IdentityUser ** by adding list of **UsedPassword ** to it ? The class will be like that :
public class UsedPassword { public string HashPassword { get; set; } public DateTimeOffset CreatedDate { get; set; } public string UserID { get; set; } } -
0
hi
Yes, You can also add a new table
Id UserID CreatedDate Password -
0
Hi ,
Can you give me a sample code for how to add list of objects to **IdentityUser **.
Thanks
-
0
hi
You can create a new entity
IdentityUser is one to many of your entity.
https://learn.microsoft.com/en-us/ef/core/modeling/relationships/one-to-many
