Validate Password Reset Token Umbraco #help-with-umbraco

Validate Password Reset Token

AaronSadlerUK

07/14/2023, 8:43 AM

I am trying to hook up the

_memberManager.VerifyUserTokenAsync()

method to validate the password reset token which is generated by

_memberManager.GeneratePasswordResetTokenAsync(member)

The only part I cannot figure out is how to get the

PasswordResetTokenProvider

Can someone shed some light? Thanks!

Sebastiaan

07/14/2023, 8:52 AM

Internally we use "Default"

var result = await _userManager.VerifyUserTokenAsync(user, "Default", "ResetPassword", resetCode);

Sebastiaan

07/14/2023, 8:53 AM

But that's for backoffice, can't find any usage for members.

AaronSadlerUK

07/14/2023, 8:55 AM

Awesome that worked 😁 Thanks!

Sebastiaan

07/14/2023, 8:55 AM

lol! well, colour me surprised! 😂

Mike Chambers

07/14/2023, 9:55 AM

result = await _memberManager.VerifyUserTokenAsync(member!, _identityOptions.Tokens.PasswordResetTokenProvider, UserManager<MemberIdentityUser>.ResetPasswordTokenPurpose, token!))

Mike Chambers

07/14/2023, 9:55 AM

memberManager and userManager both have the same base..

public interface IMemberManager : IUmbracoUserManager<MemberIdentityUser>

Mike Chambers

07/14/2023, 9:56 AM

and you can remove the magic strings.. injecting

private readonly IdentityOptions _identityOptions;

Mike Chambers

07/14/2023, 9:57 AM

I think there are a few issues raised around member and user sharing the same Identity configs.. so probably why either VerifyUserTokenAsync works.

Mike Chambers

07/14/2023, 10:01 AM

I did come across another one with recently also implementing the suite of member pwd stufff.. in that changePassword if you supply an in correct current password, you get a misleading message. "The confirmed password doesn't match the new password!" https://github.com/umbraco/Umbraco-CMS/issues/14528

31 Views

Previous Next