WASM+Identity acct conf and PW recovery

[guardrex]

Fixes #33771

cc: @lolhans ... who was just asking about this scenario over on dotnet/blazor-samples#377.

Notes

• After the key vault approach in Add Key Vault approach for client secret #33934 is revised by feedback and merged, I'll add that approach to both of the account perf+PW articles for the email provider API key. That will be on a separate PR later after this merges.
• I'm not excited about the sample app's current avoidance of EditForm and DA in the Login and Register components. I'm going with an EditForm+DA here for the new ForgotPassword component, and I'll open an issue to update those other two components to use EditForm+DA later.
• Server-side/BWA articles are moving from the "Server" folder to the "Security and Identity" root folder, and the WASM+Identity-related articles are going into a dedicated folder in the "WebAssembly" folder. I'll be adding another new article to the WASM+Identity folder for a total of three articles when I get 2FA/TOTP written up. Anyway ... there's only ONE file that you need to look at on the diff ... aspnetcore/blazor/security/webassembly/standalone-with-identity/account-confirmation-and-password-recovery.md. That's the new article to review.
• There are three sections retained from the BWA version of the acct conf+PW article at the bottom of the new article. I think they're effective approaches here for the WASM+Identity scenario, but I'm not sure. Let me know if they're OK to keep ...
  • Email and activity timeout
  • Change all ASP.NET Core Data Protection token lifespans
  • Change the email token lifespan
• I don't think that I checked the PW recovery bits in the BWA scenario. That's a separate thing, so I'll open a new issue to confirm that the BWA PW recovery works OOB with the built-in Identity components.

NOTE in passing that if the confirmation email link from the email breaks, the output of the endpoint is kind'a bad ... thought that you might want to present something friendly as a response to a malformed/bad query string ...

Microsoft.AspNetCore.Http.BadHttpRequestException: Required parameter "string code" was not provided from query string.

---

Internal previews

Toggle expand/collapse

📄 File	🔗 Preview link
aspnetcore/blazor/call-web-api.md	aspnetcore/blazor/call-web-api
aspnetcore/blazor/components/integration.md	aspnetcore/blazor/components/integration
aspnetcore/blazor/components/prerender.md	aspnetcore/blazor/components/prerender
aspnetcore/blazor/components/render-modes.md	aspnetcore/blazor/components/render-modes
aspnetcore/blazor/file-uploads.md	aspnetcore/blazor/file-uploads
aspnetcore/blazor/fundamentals/dependency-injection.md	aspnetcore/blazor/fundamentals/dependency-injection
aspnetcore/blazor/fundamentals/index.md	aspnetcore/blazor/fundamentals/index
aspnetcore/blazor/fundamentals/signalr.md	aspnetcore/blazor/fundamentals/signalr
aspnetcore/blazor/fundamentals/startup.md	aspnetcore/blazor/fundamentals/startup
aspnetcore/blazor/host-and-deploy/server.md	aspnetcore/blazor/host-and-deploy/server
aspnetcore/blazor/hybrid/security/security-considerations.md	aspnetcore/blazor/hybrid/security/security-considerations
aspnetcore/blazor/javascript-interoperability/call-javascript-from-dotnet.md	aspnetcore/blazor/javascript-interoperability/call-javascript-from-dotnet
aspnetcore/blazor/security/account-confirmation-and-password-recovery.md	aspnetcore/blazor/security/account-confirmation-and-password-recovery
aspnetcore/blazor/security/additional-scenarios.md	aspnetcore/blazor/security/additional-scenarios
aspnetcore/blazor/security/authentication-state.md	aspnetcore/blazor/security/authentication-state
aspnetcore/blazor/security/blazor-web-app-with-oidc.md	aspnetcore/blazor/security/blazor-web-app-with-oidc
aspnetcore/blazor/security/index.md	aspnetcore/blazor/security/index
aspnetcore/blazor/security/interactive-server-side-rendering.md	aspnetcore/blazor/security/interactive-server-side-rendering
aspnetcore/blazor/security/qrcodes-for-authenticator-apps.md	aspnetcore/blazor/security/qrcodes-for-authenticator-apps
aspnetcore/blazor/security/static-server-side-rendering.md	aspnetcore/blazor/security/static-server-side-rendering
aspnetcore/blazor/security/webassembly/standalone-with-identity/index.md	aspnetcore/blazor/security/webassembly/standalone-with-identity/index
aspnetcore/blazor/tutorials/movie-database-app/part-4.md	aspnetcore/blazor/tutorials/movie-database-app/part-4
aspnetcore/migration/70-80.md	aspnetcore/migration/70-80
aspnetcore/release-notes/aspnetcore-8.0.md	aspnetcore/release-notes/aspnetcore-8.0
aspnetcore/security/authentication/accconfirm.md	aspnetcore/security/authentication/accconfirm
aspnetcore/security/authentication/social/additional-claims.md	aspnetcore/security/authentication/social/additional-claims
aspnetcore/toc.yml	aspnetcore/toc
aspnetcore/whats-new/dotnet-AspNetCore.Docs-mod1.md	aspnetcore/whats-new/dotnet-AspNetCore.Docs-mod1
aspnetcore/whats-new/dotnet-AspNetCore.Docs-mod3.md	aspnetcore/whats-new/dotnet-AspNetCore.Docs-mod3
aspnetcore/whats-new/dotnet-AspNetCore.Docs-mod4.md	aspnetcore/whats-new/dotnet-AspNetCore.Docs-mod4

Note

This table shows preview links for the 30 files with the most changes. For preview links for other files in this PR, select OpenPublishing.Build Details within checks.