C#•3w ago

✅ CheckPasswordSignInAsync returns fail when password is correct

Ok I followed function calls from

var result = await _signInManager.CheckPasswordSignInAsync(user, loginDto.Password ,false);

var result = await _signInManager.CheckPasswordSignInAsync(user, loginDto.Password ,false);

to VerifyPasswordAsync which runs

return PasswordHasher.VerifyHashedPassword(user, hash, password);

return PasswordHasher.VerifyHashedPassword(user, hash, password);

Where VerifyHashedPassword is called I've checked that hash is the hashed password and that password is in-fact the password. Here is my code:

   [HttpPost("login")]
   public async Task<IActionResult> Login(LoginDto loginDto)
   {
       if (!ModelState.IsValid)
           return BadRequest(ModelState);
       
       var user = await _userManager.Users.FirstOrDefaultAsync(x => x.Email == loginDto.Email);

       if (user == null)
           return Unauthorized("Invalid Email"); 
      
       var result = await _signInManager.CheckPasswordSignInAsync(user, loginDto.Password ,false);
      
       if (!result.Succeeded)
           return Unauthorized("Email or Password not found/incorrect");

       return Ok(
           new NewUserDto
           {
               UserName = user.UserName,
               Email = user.Email,
               Token = _tokenService.CreateToken(user)
           }); 
   }

   [HttpPost("login")]
   public async Task<IActionResult> Login(LoginDto loginDto)
   {
       if (!ModelState.IsValid)
           return BadRequest(ModelState);
       
       var user = await _userManager.Users.FirstOrDefaultAsync(x => x.Email == loginDto.Email);

       if (user == null)
           return Unauthorized("Invalid Email"); 
      
       var result = await _signInManager.CheckPasswordSignInAsync(user, loginDto.Password ,false);
      
       if (!result.Succeeded)
           return Unauthorized("Email or Password not found/incorrect");

       return Ok(
           new NewUserDto
           {
               UserName = user.UserName,
               Email = user.Email,
               Token = _tokenService.CreateToken(user)
           }); 
   }

Does anyone have an idea of what's going on?

6 Replies

Unknown User•3w ago

Message Not Public

MODiX•3w ago

If your code is too long, you can post to https://paste.mod.gg/, save, and copy the link into chat for others to see your shared code!

clownshark5503•3w ago

I was removing bogus comments from the code I was pasting to keep it less cluttered and I must have removed a line thats a part of the actual code on accident

Unknown User•3w ago

Message Not Public

clownshark5503•3w ago

We're good man I am facepalming at myself How do mean fox the eternal issue?

Unknown User•3w ago

Message Not Public

Gaming

Programming

✅ CheckPasswordSignInAsync returns fail when password is correct