[mckaragoz]

Summary

Introduces configurable password security policies and password history enforcement across UltimateAuth, with server-side validation, client-side policy discovery, and updated sample and Identity Lab experiences.

Changes

• Added Basic, Standard (default), and Strict password policy presets with configurable overrides.
• Added password strength, common-password, and user-similarity validation.
• Added password history enforcement with InMemory and EF Core persistence.
• Integrated password validation into credential creation, changes, recovery, and user provisioning.
• Added a public password policy endpoint and client API for retrieving effective requirements.
• Added client-side password validation for immediate feedback while preserving server-side authority.
• Updated Identity Lab registration, user creation, and password change interfaces.
• Added documentation covering presets, configuration, history, and client integration.
• Added unit, persistence, atomicity, and workflow regression tests.

Compatibility

• Default policy: Standard.
• Password history: Disabled by default (RememberLast = 0).
• Database: EF Core migrations are included for password history persistence.
• API: Introduces new public configuration and client contracts.

Validation

Includes regression coverage for password policy resolution, validation, history storage, credential lifecycle integration, and client-side requirements.

[codecov]

Codecov Report

❌ Patch coverage is 94.53608% with 53 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.38%. Comparing base (12e7e0a) to head (b05a188).

Files with missing lines	Patch %	Lines
...ls.InMemory/Stores/InMemoryPasswordHistoryStore.cs	85.50%	6 Missing and 4 partials ⚠️
....Reference/Services/CredentialManagementService.cs	95.48%	6 Missing and 1 partial ⚠️
...redentials/Policies/UAuthPasswordStrengthPolicy.cs	87.75%	3 Missing and 3 partials ⚠️
...als/Policies/UAuthPasswordPolicyContextProvider.cs	0.00%	5 Missing ⚠️
...edentials/Policies/BuiltInCommonPasswordChecker.cs	96.39%	2 Missing and 2 partials ⚠️
...als/Policies/UAuthPasswordUserSimilarityChecker.cs	92.59%	1 Missing and 3 partials ⚠️
...imateAuth.Client/Services/UAuthCredentialClient.cs	0.00%	3 Missing ⚠️
...edentials/Options/PasswordPolicyOptionsResolver.cs	95.31%	1 Missing and 2 partials ⚠️
...ent/Infrastructure/UAuthPasswordClientValidator.cs	92.85%	1 Missing and 1 partial ⚠️
...FrameworkCore/Stores/EfCorePasswordHistoryStore.cs	97.26%	1 Missing and 1 partial ⚠️
... and 4 more

Additional details and impacted files

@@            Coverage Diff             @@
##              dev     #136      +/-   ##
==========================================
+ Coverage   87.03%   87.38%   +0.35%     
==========================================
  Files         689      717      +28     
  Lines       19337    20210     +873     
  Branches     2375     2463      +88     
==========================================
+ Hits        16829    17660     +831     
- Misses       1743     1769      +26     
- Partials      765      781      +16     

Flag	Coverage Δ
framework	87.38% <94.53%> (+0.35%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.