paul/yavsc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

* instdbws.sql: Creates a new table to store

Browse Source 
one time usage passwords

* NpgsqlMembershipProvider.cs: should fix a bug at resetting the
  password

* AccountController.cs: Allows the questions and answer to be
  specified for password recovery, at registration time

* RegisterClientModel.cs: Implements the Question and answer in the
  registration model
This commit is contained in:
Paul Schneider
2015-06-18 12:03:58 +02:00
parent 53930befd3
commit 4ba20187e8
7 changed files with 49 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
NpgsqlMRPProviders/NpgsqlMembershipProvider.cs
View File

@ -729,7 +729,6 @@ namespace Npgsql.Web
// and hydrates a MembershiUser from the values. Called by the
// MembershipUser.GetUser implementation.
//
private MembershipUser GetUserFromReader (NpgsqlDataReader reader)
{
object providerUserKey = reader.GetValue (0);
@ -870,10 +869,10 @@ namespace Npgsql.Web
using (NpgsqlConnection conn = new NpgsqlConnection (connectionString)) {
using (NpgsqlCommand cmd = new NpgsqlCommand ("SELECT PasswordAnswer, IsLockedOut FROM Users " +
" WHERE Username = @Username AND ApplicationName = @ApplicationName", conn)) {
" WHERE Username = :uname AND ApplicationName = :app", conn)) {
cmd.Parameters.AddWithValue ("@Username", NpgsqlDbType.Varchar, 255).Value = username;
cmd.Parameters.AddWithValue ("@ApplicationName", NpgsqlDbType.Varchar, 255).Value = pApplicationName;
cmd.Parameters.AddWithValue ("uname", username );
cmd.Parameters.AddWithValue ("app", pApplicationName);
string passwordAnswer = "";
@ -891,7 +890,7 @@ namespace Npgsql.Web
} else {
throw new MembershipPasswordException ("The supplied user name is not found.");
}
reader.Close ();
if (RequiresQuestionAndAnswer && !CheckPassword (answer, passwordAnswer)) {
UpdateFailureCount (username, "passwordAnswer");
@ -909,7 +908,6 @@ namespace Npgsql.Web
rowsAffected = updateCmd.ExecuteNonQuery ();
reader.Close ();
}
conn.Close ();
}