All responses should be in same format defined by API Response class.

• Move date attributes to a date namespace inside attributes
• Change onlyfuture to FutureOnly

Create the following new attributes

• PastOnly
• past and present

Add an API to get captcha. Either use ReCaptcha or a FOSS nuget package

this should not be the case

Create a new DateLib under utils with the following functions,

• CombaineDateAndTime //combines date and time from different DateTime objects

• Add integration tests that call the APIs
• Explore mock database calls

Ref: https://youtu.be/O3AvN2Rr1uI

• https://devblogs.microsoft.com/dotnet/new-dotnet-6-apis-driven-by-the-developer-community/
• #69
• #83
• #82

Anyone with access to the source code can already decrypt it and find the original key as the encryption key is stored with the connection string. Hence this is not needed and makes the process the changing the connection string difficult.

Dependabot couldn't find a .(cs|vb|fs)proj for this project.

Dependabot requires a .(cs|vb|fs)proj to evaluate your project's current .NET dependencies. It had expected to find one at the path: /<anything>.(cs|vb|fs)proj.

If this isn't a .NET project, or if it is a library, you may wish to disable updates for it from within Dependabot.

You can mention @dependabot in the comments below to contact the Dependabot team.

Depends on #48

Ref:

1. https://devblogs.microsoft.com/dotnet/announcing-net-6-preview-7/#libraries-simplified-call-patterns-for-cryptographic-operations
2. https://devblogs.microsoft.com/dotnet/performance-improvements-in-net-6/#cryptography

Also look into

• https://devblogs.microsoft.com/dotnet/new-dotnet-6-apis-driven-by-the-developer-community/#cspng-cryptographically-secure-pseudorandom-number-generator

Check passwords on HaveIBeenPwned.

API : https://haveibeenpwned.com/API/v2#PwnedPasswords

Ref: https://github.com/FaithLV/SharpPwned.NET/blob/master/SharpPwned.NET/SharpPwned.cs

Create a startup lib that allows to reassign config values in runtime

• Check out and add custom Intellicode completion for this project.
• Add GitHub action to auto train model on commiting to master.
• MicrosoftDocs/intellicode#307

• Combine common tasks in Adding claims. Use generic function for adding all claims.
• Add additional registered claims such as issuer

New security lib functions

• Encryption & decryption (use system or standars nuget)
• URL friendly encryption & decryption

Achieve the second via a helper function that convert strings to URL friendly one and in reverse

Ref:

• https://dotnetthoughts.net/implementing-content-security-policy-in-aspnetcore/#comment-5593448558
• https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP#sample_violation_report

Remove all System. references specific to Windows.

1. Stop using claim types from two different namespaces. Ref here for newer one: https://stackoverflow.com/a/50012477/5407188
2. Remove subject variable from the class
3. The "iat" date time is in invalid format
4. Add not before(nbf) claim

Add documentation to all existing classes

Try to integrate currency conversion under external services

Ref: https://stackoverflow.com/questions/6750116/how-to-eliminate-all-line-breaks-in-string/6765676#6765676

Also add testing in CI/CD

Add new function "CreateFileResponse" in web api helper

Move all config from Startup.cs to settings.json

Create a new repo for it if needed

This is currently hardcoded. Move it to config.

• Use role based auth
• Roles are User and Admin

Add subclasses for security, gzip, etc....

• Complete #48 first
• Build & run tests in CI

Use csv logger for it

Match them to be in the same order as in the code

For configuring authentication, etc....

Add model validation to all incoming models

Broken during .Net core 3 upgrade