Tag: identity
All the articles with the tag "identity".
Five minutes on the login page: an expired passkey challenge shouldn't be a 500
If a user left the login page open for more than five minutes and then signed in with a passkey, ASP.NET Core Identity threw instead of returning SignInResult.Failed. Notes on PR #67539: where the challenge actually lives, why it expires, and where to draw the line between a failed sign-in and a programming error.
"If you didn't request this, you can ignore it": the default Identity emails go to strangers too
Anyone can type any address into a register or forgot-password form, so ASP.NET Core Identity's default emails regularly reach people who never asked for them. Notes on PR #66747: where that text actually ships, a wording problem caught in review, and a test that turned out to be parsing the email.