public void ChangePassword() { CreateUserWithHashedPassword(); try { provider.ChangePassword("foo", "barbar!", "bar2"); Assert.Fail(); } catch (ArgumentException ae1) { Assert.AreEqual("newPassword", ae1.ParamName); Assert.IsTrue(ae1.Message.Contains("length of parameter")); } try { provider.ChangePassword("foo", "barbar!", "barbar2"); Assert.Fail(); } catch (ArgumentException ae1) { Assert.AreEqual("newPassword", ae1.ParamName); Assert.IsTrue(ae1.Message.Contains("alpha numeric")); } // now test regex strength testing bool result = provider.ChangePassword("foo", "barbar!", "zzzxxx!"); Assert.IsFalse(result); // now do one that should work result = provider.ChangePassword("foo", "barbar!", "barfoo!"); Assert.IsTrue(result); provider.ValidateUser("foo", "barfoo!"); }