don't show ResetPassword page without valid code (#2052)

TASVideos · Nov 30, 2024 · 6d5a46b · 6d5a46b
1 parent ee2a5a8
commit 6d5a46b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/TASVideos/Pages/Account/ResetPassword.cshtml.cs b/TASVideos/Pages/Account/ResetPassword.cshtml.cs
@@ -36,6 +36,11 @@ public async Task<IActionResult> OnGet()
 			return Home();
 		}
 
+		if (!await userManager.VerifyUserTokenAsync(user, userManager.Options.Tokens.PasswordResetTokenProvider, UserManager.ResetPasswordTokenPurpose, Code))
+		{
+			return Home();
+		}
+
 		Email = user.Email;
 		return Page();
 	}