Rite.OWASP.PasswordModule

A .NET 8 library for validating passwords against OWASP recommendations, with multi-language support and pwned password checks also suppporting password generations.

Features

• Minimum length enforcement
• Complexity requirements: uppercase, lowercase, digits, special characters
• Repeating and sequential character checks
• Contextual information checking: prevents use of user-related info (e.g., username, email, company)
• Pwned password verification via Have I Been Pwned API (optional)
• Localization: error messages in English, French, Spanish, German, Italian, Hindi, Gujarati and Marathi
• Password generator that respects all validation rules

Installation

dotnet add package Rite.OWASP.PasswordValidator

Usage

Basic Validation

var validator = new PasswordValidator() var result = await validator.ValidateAsync("password123", "en"); if (!result.IsValid) { foreach (var error in result.Errors) { Console.WriteLine(error); } }

Contextual Information

_validator.UserContextInformation = request.ContextInfo; var result = await _validator.ValidateAsync(request.Password, request.locale); return Ok(new { result.IsValid, result.Errors });

Localization

Pass the desired locale code (e.g., "en", "fr", "es", "de", "it", "hi", "gu", "mr") to ValidateAsync:

var result = await validator.ValidateAsync("password123", "fr");

Password Generation

string password = PasswordGenerator.Generate(validator);

API

• ValidateAsync(string password, string locale = "en")
  Returns a ValidationResult with IsValid and Errors properties.
• WithUserContext(params string[] contextInfo)
  Method to set user context information.
• WithPwnedPasswordCheck(bool enabled = true)
  Enable/disable pwned password check.
• PasswordGenerator.Generate(PasswordValidator validator)
  Generates a valid password.

Supported Locales

• English (en)
• French (fr)
• Spanish (es)
• German (de)
• Italian (it)
• Hindi (hi)
• Gujarati (gu)
• Marathi (mr)