public ActionResult ChangePassword()
{
var vm = new ChangePasswordViewModel();
return View(vm);
}
public ActionResult ChangePassword(ChangePasswordViewModel vm)
{
if (!ModelState.IsValid)
return View(vm);
var user = _userService.CurrentUser;
var result = ValidateUser(user.Email, vm.CurrentPassword);
if (result != null)
{
ModelState.AddModelError("CurrentPassword", "Provided current password is incorrect.");
return View(vm);
}
_userService.SetPassword(user.Id, vm.NewPassword);
return RedirectToAction("EditProfile", "Account").WithSuccessMessage("Password has been successfully updated.");
}