1 using DemoCoreIdentity.Data;
 2 using Microsoft.AspNetCore.Identity;
 3 using Microsoft.EntityFrameworkCore;
 4 
 5 var builder = WebApplication.CreateBuilder(args);
 6 
 7 // Add services to the container.
 8 var connectionString = builder.Configuration.GetConnectionString("DefaultConnection");
 9 builder.Services.AddDbContext<ApplicationDbContext>(options =>
10     options.UseSqlServer(connectionString));
11 builder.Services.AddDatabaseDeveloperPageExceptionFilter();
12 
13 #region Identity
14 
15 builder.Services.AddDefaultIdentity<IdentityUser>(options => options.SignIn.RequireConfirmedAccount = true)
16     .AddEntityFrameworkStores<ApplicationDbContext>();
17 builder.Services.AddControllersWithViews();
18 
19 builder.Services.Configure<IdentityOptions>(options =>
20 {
21     // Password settings.
22     options.Password.RequireDigit = true;
23     options.Password.RequireLowercase = true;
24     options.Password.RequireNonAlphanumeric = true;
25     options.Password.RequireUppercase = true;
26     options.Password.RequiredLength = 6;
27     options.Password.RequiredUniqueChars = 1;
28 
29     // Lockout settings.
30     options.Lockout.DefaultLockoutTimeSpan = TimeSpan.FromMinutes(5);
31     options.Lockout.MaxFailedAccessAttempts = 5;
32     options.Lockout.AllowedForNewUsers = true;
33 
34     // User settings.
35     options.User.AllowedUserNameCharacters =
36     "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._@+";
37     options.User.RequireUniqueEmail = false;
38 });
39 
40 builder.Services.ConfigureApplicationCookie(options =>
41 {
42     // Cookie settings
43     options.Cookie.HttpOnly = true;
44     options.ExpireTimeSpan = TimeSpan.FromMinutes(5);
45 
46     options.LoginPath = "/Identity/Account/Login";
47     options.AccessDeniedPath = "/Identity/Account/AccessDenied";
48     options.SlidingExpiration = true;
49 });
50 
51 #endregion
52 
53 var app = builder.Build();
54 
55 // Configure the HTTP request pipeline.
56 if (app.Environment.IsDevelopment())
57 {
58     app.UseMigrationsEndPoint();
59 }
60 else
61 {
62     app.UseExceptionHandler("/Home/Error");
63     // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
64     app.UseHsts();
65 }
66 
67 app.UseHttpsRedirection();
68 app.UseStaticFiles();
69 
70 app.UseRouting();
71 
72 app.UseAuthentication();
73 app.UseAuthorization();
74 
75 app.MapControllerRoute(
76     name: "default",
77     pattern: "{controller=Home}/{action=Index}/{id?}");
78 app.MapRazorPages();
79 
80 app.Run();

 1 using DemoCoreIdentity.Models;
 2 using Microsoft.AspNetCore.Authorization;
 3 using Microsoft.AspNetCore.Mvc;
 4 using System.Diagnostics;
 5 
 6 namespace DemoCoreIdentity.Controllers
 7 {
 8     [Authorize]
 9     public class HomeController : Controller
10     {
11         private readonly ILogger<HomeController> _logger;
12 
13         public HomeController(ILogger<HomeController> logger)
14         {
15             _logger = logger;
16         }
17 
18         public IActionResult Index()
19         {
20             return View();
21         }
22 
23         public IActionResult Privacy()
24         {
25             return View();
26         }
27 
28         [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
29         public IActionResult Error()
30         {
31             return View(new ErrorViewModel { RequestId = Activity.Current?.Id ?? HttpContext.TraceIdentifier });
32         }
33     }
34 }