Problems with using external login and sending confirmation mail in asp.NET core identity

Question

I am trying to set up a web app with authentication via a google API, using the docs from microsoft.

My ConfigureServices looks like this:

        public void ConfigureServices(IServiceCollection services)
        {
            services.AddDbContext<ApplicationDbContext>(options =>
                options.UseSqlServer(
                    Configuration.GetConnectionString("DefaultConnection")));

            services.AddDefaultIdentity<IdentityUser>(options => options.SignIn.RequireConfirmedAccount = true)
                .AddEntityFrameworkStores<ApplicationDbContext>();
            services.AddControllersWithViews();
            services.AddRazorPages();
            services.AddAuthentication().AddGoogle(options =>
                 {
                     IConfigurationSection googleAuthNSection =
                     Configuration.GetSection("Authentication:Google");
                     options.ClientId = googleAuthNSection["ClientId"];
                     options.ClientSecret = googleAuthNSection["ClientSecret"];
                     options.CallbackPath = "/oauth2callback";
                 });
            services.AddTransient<IEmailSender, EmailSender>();
        }

I have set up SendGrid to send mails for activating the accounts.

However, when I am registering an account with the google API, the confirmation mail is not sent, and I can't activate the account. This works just fine when I am registering an account with just an e-mail address.

The confirmation mail is sent when I set the SignIn.RequireConfirmedAccount to false. But why do I have to do this? It does not make sense to me that the confirmation mail is only being sent in case the account confirmation is not required. I also don't want to set this to false because otherwise you can log on without confirmation.

I am using .NET core 3.0

Not yet, I have asked it on an existing issue on github: github.com/aspnet/AspNetCore.Docs/issues/13206 — wserr
– wserr, Commented Nov 28, 2019 at 14:19

gp2gp2 · Accepted Answer · 2019-12-30 19:13:59Z

I had exactly same issue when using .netCore 3.1 and Blazor server side app. Instead SendGrid I am using my custom email sender but the result is exactly same. Confirmation email is only sent when I create local account. When authenticating via external providers no email is sent and therefore no way to confirm the account and login into the app.

I fixed this by setting this in my Startup.cs:

services.AddDefaultIdentity<IdentityUser>(options => 
        {
            options.SignIn.RequireConfirmedAccount = false;
            options.SignIn.RequireConfirmedEmail = true;
        })
        .AddRoles<IdentityRole>()
        .AddEntityFrameworkStores<ApplicationDbContext>();

That did the trick. User after registration is automatically logged to the app but after he logouts and did not confirm his email is not allowed to login again. Also that way email message is sent no matter if it was local account registered or the one from 3rd party (Google, Facebook, etc.).

Collectives™ on Stack Overflow

Problems with using external login and sending confirmation mail in asp.NET core identity

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related