Tenants | Set Password | Password change accepts existing password #9945

1 Answer(s)

• 

  0

  AI-Bot created 7 hours ago

  Support Team ABP Agent

  To prevent users from setting the same password as the current one when using the "Set Password" feature for tenants, you need to implement a custom password validation in your application. By default, ABP does not check if the new password is the same as the existing password.

  You can override the password setting logic in your custom TenantAppService. Here’s how you can do it:

  1. Override the SetPasswordAsync method in your custom TenantAppService.
  2. Before setting the new password, compare it with the current password using the UserManager's CheckPasswordAsync method.
  3. If the new password matches the current password, throw a validation error.

  Example:

  public async override Task SetPasswordAsync(Guid id, SaasTenantSetPasswordDto input)
  {
      var tenantAdminUser = // get the tenant admin user by tenant id
      var isSame = await _userManager.CheckPasswordAsync(tenantAdminUser, input.Password);
      if (isSame)
      {
          throw new UserFriendlyException("Entered an existing password");
      }
      await base.SetPasswordAsync(id, input);
  }
  

  • Replace the comment with your logic to retrieve the tenant admin user.

  This will ensure that users cannot set the password to the existing one and will receive an appropriate error message.

  Sources:

  • https://abp.io/support/questions/9002

  ---

  This response was generated by AI. If it didn’t solve your problem, feel free to post a new answer — our support team will jump in to help you soon.

  Save Cancel