Email Change - InvalidToken

user_11441069 0
Viewed 143

I have scaffolded account manage pages at blazor server app. Unfortunately, when I try to change the user email (Identity/Account/Manage/Email), link that is generated seems to be not correct.

var userId = await _userManager.GetUserIdAsync(user);
var code = await _userManager.GenerateChangeEmailTokenAsync(user, Input.NewEmail);
var callbackUrl = Url.Page(
              "/Account/ConfirmEmailChange",
              pageHandler: null,
              values: new { userId = userId, email = Input.NewEmail, code = code },
              protocol: Request.Scheme);
              await _emailSender.SendEmailAsync(
                        Input.NewEmail,
                        "Confirm your email",
                        $"Please confirm your account by <a href='{HtmlEncoder.Default.Encode(callbackUrl)}'>clicking here</a>.");

When I use that link invalid token error is generated. The worse is that I have no idea how I can investigate that problem. All other links (password reset, confirmation email after registration) works correctly. Maybe that is connected with fact that the user class is extended by a few additional fields. Still, I don't have an idea about the next steps.

 public class AspNetUser : IdentityUser
 {
     [StringLength(100)]
     public string FirstName { get; set; }
     [StringLength(100)]
     public string LastName { get; set; }
     //ect..
 }
blazor-server-side blazor asp.net-core authentication
1 Answers

"code" at that method is wrongly decoded (Base64)

public class ConfirmEmailChangeModel : PageModel {

public async Task<IActionResult> OnGetAsync(string userId,string email,string code)
{
 /*...* 
code = Encoding.UTF8.GetString(WebEncoders.Base64UrlDecode(code));
var result = await _userManager.ChangeEmailAsync(user, email, code);
/*..*/
}
}

after removing that line everything is working correctly! What is surprising for me is that line was generated by VS! Also why it works for anyone else? That shouldn't work for anyone!

user_114410690
Related