ASP.NET Core Identity - Creating user "manually" and providing password hash - How to generate hash correctly?

Question

I must create user manually:

var user = new User
{
    Name = "Joe",
    Email = "test@****.com",
    PasswordHash = "gdfgdfgre2132143xcxzvb=="
}

context.Users.Add(user);

but the thing is that when I try to log into that account my password doesn't work.

I copied Password's hash of User account that I know password to and then I pasted it to that new User and tried to use the same password and it didnt work - password sign in failed

So I'd want to ask - what's wrong with my logic here and how can I make it work?

Is it related to SecurityStamp?

Bouke Versteegh · Accepted Answer · 2021-02-10 20:21:21Z

16

If you want to manually add the user , you should also set the NormalizedUserName property . In addition , it's better to use IPasswordHasher<TUser> Interface for hashing passwords:

The injected services :

private readonly ApplicationDbContext _context;
public readonly IPasswordHasher<IdentityUser> _passwordHasher;

public HomeController( ApplicationDbContext dbContext, IPasswordHasher<IdentityUser> _passwordHasher)
{

    this._context = dbContext;
    this._passwordHasher = _passwordHasher;

}

I assume your User inherits IdentityUser , here i use IdentityUser for example:

IdentityUser applicationUser = new IdentityUser();
Guid guid = Guid.NewGuid();
applicationUser.Id = guid.ToString();
applicationUser.UserName = "Joe";
applicationUser.Email = "[email protected]";
applicationUser.NormalizedUserName = "[email protected]";

_context.Users.Add(applicationUser);


var hashedPassword = _passwordHasher.HashPassword(applicationUser, "YourPassword");
applicationUser.SecurityStamp = Guid.NewGuid().ToString();
applicationUser.PasswordHash = hashedPassword;

_context.SaveChanges();

You can also use UserManager.CreateAsync to create the specified user in the backing store with given password :

var user = new IdentityUser { UserName = "Joe", Email = "[email protected]" };
var result = await _userManager.CreateAsync(user, "YourPassWord");
if (result.Succeeded)
{

}

Notice : You should provide Email value during login .

edited Feb 10, 2021 at 20:21

Bouke Versteegh

4,7861 gold badge45 silver badges37 bronze badges

answered Oct 1, 2019 at 8:12

Nan Yu

27.7k9 gold badges75 silver badges157 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Joelty Over a year ago

the thing is, that I'm creating this account in tests and injecting all those REAL Identity related classes is painful for me

Nan Yu Over a year ago

Then you can use the manually way , provider related properties .

Joelty Over a year ago

Thanks! Apparently creating an instance of PasswordHasher didnt require any other dependencies - everything works fine!

Martin Schneider Jan 14 at 14:25

The default "POST /login" endpoint of app.MapIdentityApi<User>() returns status code 401 "Unauthorized" until I do a ToUpperInvariant() on the email before setting it for NormalizedUserName. This matches the behavior of the "POST /register" endpoint.

Collectives™ on Stack Overflow

ASP.NET Core Identity - Creating user "manually" and providing password hash - How to generate hash correctly?

1 Answer 1

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related