Block a user
Password Length Limit
Something of note is in .NET Core 3, the Rune type was introduced. This represents a Unicode scalar value which is…
Password Validation on Login and Password Rule Changes
Standardize HTTP Responses
Response code 422 should be returned if a parameter fails to validate as noted in this Quora post. More…
Cross Site Request Forgery Token Interface
The endpoint for this and just about anything like it should probably be guarded by requiring a signed API key, not just allowing an end user that's logged in to fetch tokens as they please.
Separate Physical and Digital Items
Cross Site Request Forgery Token Interface