public async Task <Zxcvbn> GetInstanceAsync()
{
await _semaphoreSlim.RunSynchronized(() =>
{
if (_zxcvbn != null)
{
return;
}
try
{
var assembly = Assembly.GetExecutingAssembly();
var resourceNames = assembly.GetManifestResourceNames();
var resName = nameof(Properties.Resources.passwordsmatcher);
var resourceName = resourceNames.FirstOrDefault(x => x.Contains(resName));
if (resourceName == null)
{
return;
}
var stream = assembly.GetManifestResourceStream(resourceName);
_zxcvbn = new Zxcvbn(stream);
}
catch (Exception e)
{
_logger.Warn($"Error while trying to load password dictionary for entropy check:{e.Message}");
}
});
return(_zxcvbn);
}
static void Main(string[] args)
{
Zxcvbn.Entropy("LamePassword");
for (int i = 0; i < 100; i++)
{
Zxcvbn.Entropy("LamePassword");
}
}
public async Task <IActionResult> Post([FromBody] ChangePasswordModel model)
{
// Validate the request
if (model == null)
{
_logger.LogWarning("Null model");
return(BadRequest(ApiResult.InvalidRequest()));
}
if (model.NewPassword != model.NewPasswordVerify)
{
_logger.LogWarning("Invalid model, passwords don't match");
return(BadRequest(ApiResult.InvalidRequest()));
}
// Validate the model
if (ModelState.IsValid == false)
{
_logger.LogWarning("Invalid model, validation failed");
return(BadRequest(ApiResult.FromModelStateErrors(ModelState)));
}
// Validate the Captcha
try
{
if (await ValidateRecaptcha(model.Recaptcha).ConfigureAwait(false) == false)
{
throw new InvalidOperationException("Invalid Recaptcha response");
}
}
catch (Exception ex)
{
_logger.LogWarning(ex, "Invalid Recaptcha");
return(BadRequest(ApiResult.InvalidCaptcha()));
}
var result = new ApiResult();
try
{
if (_options.MinimumScore > 0 && Zxcvbn.MatchPassword(model.NewPassword).Score < _options.MinimumScore)
{
result.Errors.Add(new ApiErrorItem(ApiErrorCode.MinimumScore));
return(BadRequest(result));
}
var resultPasswordChange = _passwordChangeProvider.PerformPasswordChange(
model.Username,
model.CurrentPassword,
model.NewPassword);
if (resultPasswordChange == null)
{
return(Json(result));
}
result.Errors.Add(resultPasswordChange);
}
catch (Exception ex)
{
_logger.LogError(ex, "Failed to update password");
result.Errors.Add(new ApiErrorItem(ApiErrorCode.Generic, ex.Message));
}
return(BadRequest(result));
}
public static int Strength(string Password)
{
var res = Zxcvbn.Entropy(Password);
return((int)res);
}
public void EmptyPassword()
{
Zxcvbn.MatchPassword("").Entropy.Should().Be(0);
}