Localization

Auth Credentials resolves the message for each of its exceptions through ASP.NET Localization, from the auth and passwords message groups. The resolver loads JSON files from messages/{language}, uses the file name as the message group, and returns the original message key when no language, file, or entry is found. Request validation messages come from the validation group documented by ASP.NET Request Validation.

Auth Messages

Create messages/{language}/auth.json for every language the API should support. The code-group labels below use language codes, but each block is the content for that language's auth.json file. locked-out receives the lockout expiry as {0}; every other key takes no parameters, so a {0} placed in one of them is written out to the client literally.

en.json

{
    "failed": "These credentials do not match our records.",
    "session-invalid": "This session is no longer valid. Please sign in again.",
    "two-factor-invalid": "This verification code is incorrect.",
    "two-factor-challenge-invalid": "This sign-in is no longer valid. Please sign in again.",
    "disabled": "This account has been deactivated.",
    "locked-out": "Too many failed attempts. Try again after {0}.",
    "username-taken": "This username is already in use.",
    "email-taken": "This email address is already in use.",
    "email-verification-token-invalid": "This verification link is invalid or has expired."
}

nl.json

{
    "failed": "Deze inloggegevens komen niet overeen met onze gegevens.",
    "session-invalid": "Deze sessie is niet langer geldig. Log opnieuw in.",
    "two-factor-invalid": "Deze verificatiecode is onjuist.",
    "two-factor-challenge-invalid": "Deze inlogpoging is niet langer geldig. Log opnieuw in.",
    "disabled": "Dit account is gedeactiveerd.",
    "locked-out": "Te veel mislukte pogingen. Probeer het opnieuw na {0}.",
    "username-taken": "Deze gebruikersnaam is al in gebruik.",
    "email-taken": "Dit e-mailadres is al in gebruik.",
    "email-verification-token-invalid": "Deze verificatielink is ongeldig of verlopen."
}

fr.json

{
    "failed": "Ces identifiants ne correspondent pas à nos données.",
    "session-invalid": "Cette session n'est plus valide. Veuillez vous reconnecter.",
    "two-factor-invalid": "Ce code de vérification est incorrect.",
    "two-factor-challenge-invalid": "Cette connexion n'est plus valide. Veuillez vous reconnecter.",
    "disabled": "Ce compte a été désactivé.",
    "locked-out": "Trop de tentatives échouées. Réessayez après {0}.",
    "username-taken": "Ce nom d'utilisateur est déjà utilisé.",
    "email-taken": "Cette adresse e-mail est déjà utilisée.",
    "email-verification-token-invalid": "Ce lien de vérification est invalide ou expiré."
}

WARNING

The auth file is shared with ASP.NET Auth when both packages are installed. Add these keys alongside the ones that page lists rather than replacing the file.

Password Messages

Create messages/{language}/passwords.json for the password-change and password-reset flows.

en.json

{
    "mismatch": "The provided passwords do not match.",
    "reused": "The new password must be different from your current password.",
    "token-invalid": "This password reset link is invalid or has expired."
}

nl.json

{
    "mismatch": "De opgegeven wachtwoorden komen niet overeen.",
    "reused": "Het nieuwe wachtwoord moet anders zijn dan je huidige wachtwoord.",
    "token-invalid": "Deze wachtwoordherstellink is ongeldig of verlopen."
}

fr.json

{
    "mismatch": "Les mots de passe saisis ne correspondent pas.",
    "reused": "Le nouveau mot de passe doit être différent de votre mot de passe actuel.",
    "token-invalid": "Ce lien de réinitialisation du mot de passe est invalide ou expiré."
}