WebSecurity.GeneratePasswordResetToken returns error (but user exists!)

Question

I'm working in an ASP.NET MVC 4 web app, I'm trying to make a password forget page. In my POST, I check that the user related to the password is present

WebSecurity.UserExists(email)

and it returns true, but when I exectue

WebSecurity.GeneratePasswordResetToken(email, 10);

I'm getting this error

No account exists for *email*

For reference, I was following this tutorial: http://www.thecodingguys.net/tutorials/asp/webpages-membership-forgot-password-and-reset-password.

Any ideas?

score 9 · Accepted Answer · answered Jan 18 '13 at 10:11

9

Solved, somehow in [webpages_Membership] table it wasn't present the confirmation for the user.

answered Jan 18 '13 at 10:11

Davide

1,305
3
16
36

Happened to me to. Check the data in the tables. While testing it is easy to have Userprofile entries without webpages_Membership entries. – ekenman Jul 31 '13 at 11:27
But why? Surely we can't be expected to enter this manually every now and then... – Rosdi Kasim Feb 28 '17 at 04:59
Oooooh ! The IsConfirmed field equals 0 ! – François Breton Aug 21 '19 at 16:27

score 5 · Answer 2 · answered Jul 31 '13 at 12:24

If the user is not confirmed, the same error will be thrown. Took me a while to find out so this might help someone. Perhaps someone has a better way of doing it, because this is kind of hacky.

In my case, the client want to send the user a password by mail (I know....) and if the mail needs to be resent, a new password has to be genereated.

 private string ChangePasswordForNotConfirmedUser(string emailAdress)
    {
        var membership = _membershipRepository.GetByUserName(emailAdress);
        membership.IsConfirmed = true;
        _membershipRepository.Save(membership);
        var token = WebSecurity.GeneratePasswordResetToken(emailAdress);
        var password = Membership.GeneratePassword(GlobalSettings.PasswordLenght, GlobalSettings.PasswordNoAlphaChars);
        WebSecurity.ResetPassword(token, password);
        membership.IsConfirmed = false;
        _membershipRepository.Save(membership);
        return password;
    }

score 5 · Answer 3 · answered Feb 22 '14 at 14:53

This solved the problem for me without thinking about anything else.

try
        {
            token = WebSecurity.GeneratePasswordResetToken(username);
        }
        catch (Exception ex)
        {
            if (ex.Message.Contains("No account"))
            { 
                string password = System.Web.Security.Membership.GeneratePassword(6, 0);
                WebSecurity.CreateAccount(username, password);

            }
            token = WebSecurity.GeneratePasswordResetToken(username);
        }

score 0 · Answer 4 · answered Aug 08 '22 at 20:00

0

in my case user account was not not confirmed in DB table webpages_Membership once I set isconfirmed=1 manually then its working fine

answered Aug 08 '22 at 20:00

Nauman Sharif

205
2
12

WebSecurity.GeneratePasswordResetToken returns error (but user exists!)

4 Answers4