Change password in ASP.NET Core 2.x

Question

How to change user password by admin in Asp core 2.x ?

or Change password with sms code

My sample code:

if (!ModelState.IsValid)
    return View(model);

var user = await _userManager.FindByNameAsync(model.UserName);
if (user == null)
    return RedirectToAction("Index");

if (model.smsCode == user.SmsCode)
{
    user.PasswordHash = model.NewPassword;

    IdentityResult result = await _userManager.UpdateAsync(user);
    if (result.Succeeded)
    {
    }
}

error: save unhash pass in db

The error tells you that the password needs to be hashed before saving. Saving cleartext passwords is a big no-no. — Viggo Lundén
– Viggo Lundén, Commented Aug 2, 2018 at 9:18
Are you trying to save a plain text password into the PasswordHash field? I would expect you would have to hash model.NewPassword before saving it — Darren Lamb
– Darren Lamb, Commented Aug 2, 2018 at 9:19

Jaroslav Kadlec · Accepted Answer · 2019-12-10 19:35:16Z

17

We should not update the user.PasswordHash with a plain text , we should use Hash instead .

        var user = await _userManager.FindByNameAsync(model.UserName);
        if(user == null){ /**/ }
        if (model.smsCode != user.SmsCode){ /**/}

        // compute the new hash string
        var newPassword = _userManager.PasswordHasher.HashPassword(user,newpass);
        user.PasswordHash = newPassword;
        var res = await _userManager.UpdateAsync(user);

        if (res.Succeeded) {/**/}
        else { /**/}

edited Dec 10, 2019 at 19:35

Jaroslav Kadlec

2,5514 gold badges36 silver badges44 bronze badges

answered Aug 2, 2018 at 9:20

itminus

25.5k2 gold badges63 silver badges97 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Change password in ASP.NET Core 2.x

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related