Send the same message when an account exists or not in the recovery password #4488

1 Answer(s)

• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  You can try to override the SendPasswordResetCodeAsync method to handle the exception.

  For example:

  [Dependency(ReplaceServices = true)]
  [ExposeServices(typeof(IAccountAppService))]
  public class MyAccountAppService: AccountAppService
  {
     public MyAccountAppService(
         IdentityUserManager userManager,
         IAccountEmailer accountEmailer,
         IAccountPhoneService phoneService,
         IIdentityRoleRepository roleRepository,
         IdentitySecurityLogManager identitySecurityLogManager,
         IBlobContainer<AccountProfilePictureContainer> accountProfilePictureContainer,
         ISettingManager settingManager,
         IOptions<IdentityOptions> identityOptions,
         IIdentitySecurityLogRepository securityLogRepository) : base(userManager, accountEmailer, phoneService, roleRepository, identitySecurityLogManager, accountProfilePictureContainer, settingManager, identityOptions, securityLogRepository)
     {
     }
     public override async Task SendPasswordResetCodeAsync(SendPasswordResetCodeDto input)
     {
         try
         {
             var user = await GetUserByEmail(input.Email);
             var resetToken = await UserManager.GeneratePasswordResetTokenAsync(user);
             await AccountEmailer.SendPasswordResetLinkAsync(user, resetToken, input.AppName, input.ReturnUrl, input.ReturnUrlHash);
         }
         catch (Exception e)
         {
             throw new UserFriendlyException("custom message");
         }
  
     }
  }
  

  Save Cancel