为什么我的 email 确认令牌无效

Question

[HttpGet("confirm/{userId}/{token}")]
public async Task<IActionResult> ConfirmEmail(string userId, string token)
{
    User user = _userService.GetById(userId);
    IdentityResult result = await _userManager.
    ConfirmEmailAsync(user, HttpUtility.UrlDecode(token));
    if (result.Succeeded)
    {
        return Ok("Email confirmed successfully!");
    }
    else
    {
        ViewBag.Message = "Error while confirming your email!";
        return SignOut();
    }
}

So my token is invalid at Identity result Result. Why is this the case and how can i solve this? I think it has to do with that the token is not in the database. I am using asp .net core.

Answer 1

Your token maybe expired.

You can create an class like this to create a custom token provider and set expiration time

public class CustomEmailConfirmationTokenProvider<TUser> : DataProtectorTokenProvider<TUser> where TUser : class
{
    public CustomEmailConfirmationTokenProvider(IDataProtectionProvider dataProtectionProvider,
            IOptions<EmailConfirmationTokenProviderOptions> options) 
            : base(dataProtectionProvider, options)
    {
    }
}
public class EmailConfirmationTokenProviderOptions : DataProtectionTokenProviderOptions
{
    public EmailConfirmationTokenProviderOptions()
    {
        Name = "EmailDataProtectorTokenProvider";
        TokenLifespan = TimeSpan.FromDays(1);
    }
}

then register this class after services.AddIdentity method like this

services.AddIdentity<IdentityUser, IdentityRole>(identityOptions =>
            {
                 //DoSomething
            })
            .AddTokenProvider<CustomEmailConfirmationTokenProvider<IdentityUser>>("EmailDataProtectorTokenProvider");

This token expires after one day