LoginRequest

The credentials LoginAsync takes. Validation only checks that both values are present; whether they are correct is decided by the service, so a wrong password and an unknown user come back identically.

Fields

Identifier: string
A username or an email address. Both are matched, so one login form serves users who remember either.

Password: string
The password as typed. It is verified against the stored hash by the service, not during request validation.

Type signature

public sealed record LoginRequest
{
    public required string Identifier { get; set; }
    public required string Password { get; set; }
}