“passwordResetLink”链接无法在 asp.net 核心中生成

Question

我想在我的应用程序（Asp.Net Core 2.2）中创建一个忘记密码系统。我成功生成了一个令牌。但问题是当我生成 passwordResetLink 时它为空。

var passwordResetLink = Url.Action("ResetPassword", "Account",
                    new { email = model.Email, token = token }, Request.Scheme);

我不明白我的email 和token 不为空，但为什么passwordResetLink 为空？

这是我的所有代码：-

 [HttpPost]
        [AllowAnonymous]
        public async Task<IActionResult> ForgotPassword(ForgotPasswordViewModel model)
        {
            if (ModelState.IsValid)
            {
                var user = await userManager.FindByEmailAsync(model.Email);
                
                if (user != null)
                {
                    // Generate the reset password token
                    var token = await userManager.GeneratePasswordResetTokenAsync(user);
                    
                    var passwordResetLink = Url.Action("ResetPassword", "Account",
                    new { email = model.Email, token = token }, Request.Scheme); //here is the main problem.why it's null?
                  
                     return View("ForgotPasswordConfirmation");
                }

                return View("ForgotPasswordConfirmation");
            }

            return View(model);
        }

Startup.cs 文件（ConfigureServices）：-

 public void ConfigureServices(IServiceCollection services)
        {
            services.AddTransient<IBraintreeService, BraintreeService>();
            services.Configure<CookiePolicyOptions>(options =>
            {
                // This lambda determines whether user consent for non-essential cookies is needed for a given request.
                options.CheckConsentNeeded = context => true;
                options.MinimumSameSitePolicy = SameSiteMode.None;
            });

            services.AddSession(options =>
            {
                // Set a short timeout for easy testing.
                options.IdleTimeout = TimeSpan.FromMinutes(10);
                //options.Cookie.HttpOnly = true;
                // Make the session cookie essential
                options.Cookie.IsEssential = true;
            });

            services.AddDbContext<ApplicationDbContext>(options =>
                options.UseSqlServer(
                    Configuration.GetConnectionString("DefaultConnection")));
            services.AddIdentity<IdentityUser, IdentityRole>()
                .AddDefaultUI(UIFramework.Bootstrap4).AddDefaultTokenProviders()
                .AddEntityFrameworkStores<ApplicationDbContext>();

            services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
        }

这是我的输出：-

Answer 1

你应该像这样创建两个类：

public class ResetPasswordTokenProvider<TUser> : DataProtectorTokenProvider<TUser> where TUser : class
{
    public ResetPasswordTokenProvider(IDataProtectionProvider dataProtectionProvider,
            IOptions<ResetPasswordTokenProviderOptions> options)
            : base(dataProtectionProvider, options)
    {
    }
}
public class ResetPasswordTokenProviderOptions : DataProtectionTokenProviderOptions
{
    public ResetPasswordTokenProviderOptions()
    {
        Name = "ResetPasswordDataProtectorTokenProvider";
        TokenLifespan = TimeSpan.FromDays(1);
    }
}

并将创建的类注册到身份提供者：

services.AddIdentity<IdentityUser, IdentityRole>(identityOptions =>
            {
                identityOptions.Tokens.ProviderMap.Add("ResetPassword",
                    new TokenProviderDescriptor(typeof(ResetPasswordTokenProvider<IdentityUser>)));
                identityOptions.Tokens.PasswordResetTokenProvider = "ResetPassword";
            })
            .AddTokenProvider<ResetPasswordTokenProvider<IdentityUser>>("ResetPassword")
            .AddEntityFrameworkStores<ApplicationDbContext>();

Answer 2

你可以试试这个替代方法。

public async Task<IActionResult> ForgotPassword(ForgotPasswordViewModel model)
{

  var code = await userManager.GeneratePasswordResetTokenAsync(user);
  code = System.Web.HttpUtility.UrlEncode(code);
  var token = code;
  var datUrl = "https://localhost:xxxx/Customer/Account/ResetPassword?" + "email=" + 
  model.Email + "&token=" + token;

  ....

它将解决您的问题。