Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ROPC on secure user data /2 #33639

Merged
merged 3 commits into from
Sep 19, 2024
Merged

ROPC on secure user data /2 #33639

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
df0776c
ROPC on secure user data /2
Rick-Anderson Sep 18, 2024
7edde8b
ROPC on secure user data /2
Rick-Anderson Sep 18, 2024
8e63790
Update aspnetcore/security/authorization/secure-data.md
Rick-Anderson Sep 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions aspnetcore/security/authorization/secure-data.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -137,7 +137,7 @@ The `SeedData` class creates two accounts: administrator and manager. Use the [S
dotnet user-secrets set SeedUserPW <PW>
```

If a strong password is not specified, an exception is thrown when `SeedData.Initialize` is called.
If a weak password is specified, an exception is thrown when `SeedData.Initialize` is called.

Update the app to use the test password:

Expand Down Expand Up @@ -288,9 +288,12 @@ In the preceding code:

## Test the completed app

> [!WARNING]
> This article uses the [Secret Manager tool](xref:security/app-secrets) to store the password for the seeded user accounts. The Secret Manager tool is used to store sensitive data during local development. For more information on authentication for deployed test and production apps, see [Secure authentication flows](xref:security/index#secure-authentication-flows).

If you haven't already set a password for seeded user accounts, use the [Secret Manager tool](xref:security/app-secrets#secret-manager) to set a password:

* Choose a strong password: Use eight or more characters and at least one upper-case character, number, and symbol. For example, `Passw0rd!` meets the strong password requirements.
* Choose a strong password: Use eight or more characters and at least one upper-case character, number, and symbol.
* Execute the following command from the project's folder, where `<PW>` is the password:

```dotnetcli
Expand Down
Loading