当您输入错误的密码时向用户显示一条消息 ASP.NET Core 3.0 MVC

Question

当用户输入密码错误时，会出现以下消息：

Invalid login attempt.

但是当用户没有验证他的电子邮件时也会出现此消息。我怎样才能向用户显示每种情况的消息？

if (ModelState.IsValid)
{
    // This doesn't count login failures towards account lockout
    // To enable password failures to trigger account lockout, set lockoutOnFailure: true
    var result = await _signInManager.PasswordSignInAsync(Input.Email, Input.Password, Input.RememberMe, lockoutOnFailure: true);
    if (result.Succeeded)
    {
        _logger.LogInformation("User logged in.");
        return LocalRedirect(returnUrl);
    }

    if (result.RequiresTwoFactor)
    {
        return RedirectToPage("./LoginWith2fa", new { ReturnUrl = returnUrl, RememberMe = Input.RememberMe });
    }

    if (result.IsLockedOut)
    {
        _logger.LogWarning("User account locked out.");
        return RedirectToPage("./Lockout");
    }
    else
    {
        ModelState.AddModelError(string.Empty, "Invalid login attempt.");
        return Page();
    }
}

Answer 1

对于PasswordSignInAsync，它通过UserManager

检查用户名和密码

    public virtual async Task<SignInResult> PasswordSignInAsync(string userName, string password,
        bool isPersistent, bool lockoutOnFailure)
    {
        var user = await UserManager.FindByNameAsync(userName);
        if (user == null)
        {
            return SignInResult.Failed;
        }

        return await PasswordSignInAsync(user, password, isPersistent, lockoutOnFailure);
    }

您可以添加这些逻辑来识别用户名或密码是否无效。

    public async Task<IActionResult> OnPostAsync(string returnUrl = null)
    {
        returnUrl = returnUrl ?? Url.Content("~/");

        if (ModelState.IsValid)
        {
            // This doesn't count login failures towards account lockout
            // To enable password failures to trigger account lockout, set lockoutOnFailure: true
            var result = await _signInManager.PasswordSignInAsync(LoginInput.Email, LoginInput.Password, LoginInput.RememberMe, lockoutOnFailure: true);
            if (result.Succeeded)
            {
                _logger.LogInformation("User logged in.");
                return LocalRedirect(returnUrl);
            }
            if (result.RequiresTwoFactor)
            {
                return RedirectToPage("./LoginWith2fa", new { ReturnUrl = returnUrl, RememberMe = LoginInput.RememberMe });
            }
            if (result.IsLockedOut)
            {
                _logger.LogWarning("User account locked out.");
                return RedirectToPage("./Lockout");
            }
            else
            {
                var user = await _userManager.FindByNameAsync(LoginInput.Email);
                if (user == null)
                {
                    ModelState.AddModelError(string.Empty, "Invalid UserName.");
                }
                else if (!await _userManager.CheckPasswordAsync(user, LoginInput.Password))
                {
                    ModelState.AddModelError(string.Empty, "Invalid Password.");
                }
                return Page();
            }
        }

        // If we got this far, something failed, redisplay form
        return Page();
    }

当您输入错误的密码时向用户显示一条消息 ASP.NET Core 3.0 MVC

Show the user a message when you enter the password incorrectly ASP.NET Core 3.0 MVC

c#

asp.net-core

asp.net-core-identity