public async Task <ActionResult> Manage(ManageUserViewModel model)
{
string userId = User.Identity.GetUserId();
string localUserName = await Logins.GetProviderKey(User.Identity.GetUserId(), IdentityConfig.LocalLoginProvider);
bool hasLocalLogin = localUserName != null;
ViewBag.HasLocalPassword = hasLocalLogin;
ViewBag.ReturnUrl = Url.Action("Manage");
if (hasLocalLogin)
{
if (ModelState.IsValid)
{
bool changePasswordSucceeded = await ChangePassword(localUserName, model.OldPassword, model.NewPassword);
if (changePasswordSucceeded)
{
return(RedirectToAction("Manage", new { Message = ManageMessageId.ChangePasswordSuccess }));
}
else
{
ModelState.AddModelError(String.Empty, "The current password is incorrect or the new password is invalid.");
}
}
}
else
{
// User does not have a local password so remove any validation errors caused by a missing OldPassword field
ModelState state = ModelState["OldPassword"];
if (state != null)
{
state.Errors.Clear();
}
if (ModelState.IsValid)
{
try
{
// Create the local login info and link the local account to the user
localUserName = User.Identity.GetUserName();
if (await Secrets.Create(new UserSecret(localUserName, model.NewPassword)) &&
await Logins.Add(new UserLogin(userId, IdentityConfig.LocalLoginProvider, localUserName)))
{
return(RedirectToAction("Manage", new { Message = ManageMessageId.SetPasswordSuccess }));
}
else
{
ModelState.AddModelError(String.Empty, "Failed to set password");
}
}
catch (Exception e)
{
ModelState.AddModelError(String.Empty, e);
}
}
}
// If we got this far, something failed, redisplay form
return(View(model));
}
//
// GET: /Account/Manage
public async Task <ActionResult> Manage(ManageMessageId?message)
{
ViewBag.StatusMessage =
message == ManageMessageId.ChangePasswordSuccess ? "Your password has been changed."
: message == ManageMessageId.SetPasswordSuccess ? "Your password has been set."
: message == ManageMessageId.RemoveLoginSuccess ? "The external login was removed."
: String.Empty;
string localUserName = await Logins.GetProviderKey(User.Identity.GetUserId(), IdentityConfig.LocalLoginProvider);
ViewBag.UserName = localUserName;
ViewBag.HasLocalPassword = localUserName != null;
ViewBag.ReturnUrl = Url.Action("Manage");
return(View());
}
