Namespace KadicAuth.Api.Middleware
Classes
- MustChangePasswordMiddleware
Hard gate for temporary passwords (plan portal-user-provisioning P4). While the JWT carries the "must_change_password" claim, KadicAuth rejects every authenticated request with 403 EXCEPT the two the user legitimately needs to escape the state: change-password and logout. The frontend redirect is UX only — this is the security control that stops a temporary password from being used as a full session via direct API calls.
- SwaggerBasicAuthMiddleware
Protects the /swagger path with HTTP Basic authentication in non-local environments. Only active when SwaggerSettings.RequireAuth is true.