diff --git a/src/Identity/UI/src/Areas/Identity/Filters/ExternalLoginsPageFilter.cs b/src/Identity/UI/src/Areas/Identity/Filters/ExternalLoginsPageFilter.cs
index ccae7d46b3a7..978f553bb07f 100644
--- a/src/Identity/UI/src/Areas/Identity/Filters/ExternalLoginsPageFilter.cs
+++ b/src/Identity/UI/src/Areas/Identity/Filters/ExternalLoginsPageFilter.cs
@@ -1,8 +1,6 @@
-// Licensed to the .NET Foundation under one or more agreements.
+// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.
-using System.Linq;
-using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc.Filters;
using Microsoft.AspNetCore.Mvc.RazorPages;
using Microsoft.Extensions.DependencyInjection;
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/AccessDenied.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/AccessDenied.cshtml
new file mode 100644
index 000000000000..017f6ff4d164
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/AccessDenied.cshtml
@@ -0,0 +1,10 @@
+@page
+@model AccessDeniedModel
+@{
+ ViewData["Title"] = "Access denied";
+}
+
+
+
@ViewData["Title"]
+
You do not have access to this resource.
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/AccessDenied.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/AccessDenied.cshtml.cs
new file mode 100644
index 000000000000..783799aa4a65
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/AccessDenied.cshtml.cs
@@ -0,0 +1,22 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class AccessDeniedModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public void OnGet()
+ {
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmail.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmail.cshtml
new file mode 100644
index 000000000000..2deb2e52649a
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmail.cshtml
@@ -0,0 +1,8 @@
+@page
+@model ConfirmEmailModel
+@{
+ ViewData["Title"] = "Confirm email";
+}
+
+
@ViewData["Title"]
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmail.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmail.cshtml.cs
new file mode 100644
index 000000000000..58929a2f423c
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmail.cshtml.cs
@@ -0,0 +1,64 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Text;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(ConfirmEmailModel<>))]
+ public abstract class ConfirmEmailModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(string userId, string code) => throw new NotImplementedException();
+ }
+
+ internal class ConfirmEmailModel : ConfirmEmailModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+
+ public ConfirmEmailModel(UserManager userManager)
+ {
+ _userManager = userManager;
+ }
+
+ public override async Task OnGetAsync(string userId, string code)
+ {
+ if (userId == null || code == null)
+ {
+ return RedirectToPage("/Index");
+ }
+
+ var user = await _userManager.FindByIdAsync(userId);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{userId}'.");
+ }
+
+ code = Encoding.UTF8.GetString(WebEncoders.Base64UrlDecode(code));
+ var result = await _userManager.ConfirmEmailAsync(user, code);
+ StatusMessage = result.Succeeded ? "Thank you for confirming your email." : "Error confirming your email.";
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmailChange.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmailChange.cshtml
new file mode 100644
index 000000000000..114fa88a0f93
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmailChange.cshtml
@@ -0,0 +1,8 @@
+@page
+@model ConfirmEmailChangeModel
+@{
+ ViewData["Title"] = "Confirm email change";
+}
+
+
@ViewData["Title"]
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmailChange.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmailChange.cshtml.cs
new file mode 100644
index 000000000000..a7f4f1c14429
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ConfirmEmailChange.cshtml.cs
@@ -0,0 +1,82 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Text;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(ConfirmEmailChangeModel<>))]
+ public abstract class ConfirmEmailChangeModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(string userId, string email, string code) => throw new NotImplementedException();
+ }
+
+ internal class ConfirmEmailChangeModel : ConfirmEmailChangeModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+
+ public ConfirmEmailChangeModel(UserManager userManager, SignInManager signInManager)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ }
+
+ public override async Task OnGetAsync(string userId, string email, string code)
+ {
+ if (userId == null || email == null || code == null)
+ {
+ return RedirectToPage("/Index");
+ }
+
+ var user = await _userManager.FindByIdAsync(userId);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{userId}'.");
+ }
+
+ code = Encoding.UTF8.GetString(WebEncoders.Base64UrlDecode(code));
+ var result = await _userManager.ChangeEmailAsync(user, email, code);
+ if (!result.Succeeded)
+ {
+ StatusMessage = "Error changing email.";
+ return Page();
+ }
+
+ // In our UI email and user name are one and the same, so when we update the email
+ // we need to update the user name.
+ var setUserNameResult = await _userManager.SetUserNameAsync(user, email);
+ if (!setUserNameResult.Succeeded)
+ {
+ StatusMessage = "Error changing user name.";
+ return Page();
+ }
+
+ await _signInManager.RefreshSignInAsync(user);
+ StatusMessage = "Thank you for confirming your email change.";
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ExternalLogin.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ExternalLogin.cshtml
new file mode 100644
index 000000000000..615397ccfb5a
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ExternalLogin.cshtml
@@ -0,0 +1,33 @@
+@page
+@model ExternalLoginModel
+@{
+ ViewData["Title"] = "Register";
+}
+
+
@ViewData["Title"]
+
Associate your @Model.ProviderDisplayName account.
+
+
+
+ You've successfully authenticated with @Model.ProviderDisplayName.
+ Please enter an email address for this site below and click the Register button to finish
+ logging in.
+
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ExternalLogin.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ExternalLogin.cshtml.cs
new file mode 100644
index 000000000000..1908527dad83
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ExternalLogin.cshtml.cs
@@ -0,0 +1,253 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Security.Claims;
+using System.Text;
+using System.Text.Encodings.Web;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(ExternalLoginModel<>))]
+ public class ExternalLoginModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string ProviderDisplayName { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string ReturnUrl { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string ErrorMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ public string Email { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual IActionResult OnGet() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual IActionResult OnPost(string provider, string returnUrl = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetCallbackAsync(string returnUrl = null, string remoteError = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostConfirmationAsync(string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class ExternalLoginModel : ExternalLoginModel where TUser : class
+ {
+ private readonly SignInManager _signInManager;
+ private readonly UserManager _userManager;
+ private readonly IUserStore _userStore;
+ private readonly IUserEmailStore _emailStore;
+ private readonly IEmailSender _emailSender;
+ private readonly ILogger _logger;
+
+ public ExternalLoginModel(
+ SignInManager signInManager,
+ UserManager userManager,
+ IUserStore userStore,
+ ILogger logger,
+ IEmailSender emailSender)
+ {
+ _signInManager = signInManager;
+ _userManager = userManager;
+ _userStore = userStore;
+ _emailStore = GetEmailStore();
+ _logger = logger;
+ _emailSender = emailSender;
+ }
+
+ public override IActionResult OnGet() => RedirectToPage("./Login");
+
+ public override IActionResult OnPost(string provider, string returnUrl = null)
+ {
+ // Request a redirect to the external login provider.
+ var redirectUrl = Url.Page("./ExternalLogin", pageHandler: "Callback", values: new { returnUrl });
+ var properties = _signInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl);
+ return new ChallengeResult(provider, properties);
+ }
+
+ public override async Task OnGetCallbackAsync(string returnUrl = null, string remoteError = null)
+ {
+ returnUrl = returnUrl ?? Url.Content("~/");
+ if (remoteError != null)
+ {
+ ErrorMessage = $"Error from external provider: {remoteError}";
+ return RedirectToPage("./Login", new { ReturnUrl = returnUrl });
+ }
+ var info = await _signInManager.GetExternalLoginInfoAsync();
+ if (info == null)
+ {
+ ErrorMessage = "Error loading external login information.";
+ return RedirectToPage("./Login", new { ReturnUrl = returnUrl });
+ }
+
+ // Sign in the user with this external login provider if the user already has a login.
+ var result = await _signInManager.ExternalLoginSignInAsync(info.LoginProvider, info.ProviderKey, isPersistent: false, bypassTwoFactor: true);
+ if (result.Succeeded)
+ {
+ _logger.LogInformation(LoggerEventIds.UserLoggedInByExternalProvider, "User logged in with {LoginProvider} provider.", info.LoginProvider);
+ return LocalRedirect(returnUrl);
+ }
+ if (result.IsLockedOut)
+ {
+ return RedirectToPage("./Lockout");
+ }
+ else
+ {
+ // If the user does not have an account, then ask the user to create an account.
+ ReturnUrl = returnUrl;
+ ProviderDisplayName = info.ProviderDisplayName;
+ if (info.Principal.HasClaim(c => c.Type == ClaimTypes.Email))
+ {
+ Input = new InputModel
+ {
+ Email = info.Principal.FindFirstValue(ClaimTypes.Email)
+ };
+ }
+ return Page();
+ }
+ }
+
+ public override async Task OnPostConfirmationAsync(string returnUrl = null)
+ {
+ returnUrl = returnUrl ?? Url.Content("~/");
+ // Get the information about the user from the external login provider
+ var info = await _signInManager.GetExternalLoginInfoAsync();
+ if (info == null)
+ {
+ ErrorMessage = "Error loading external login information during confirmation.";
+ return RedirectToPage("./Login", new { ReturnUrl = returnUrl });
+ }
+
+ if (ModelState.IsValid)
+ {
+ var user = CreateUser();
+
+ await _userStore.SetUserNameAsync(user, Input.Email, CancellationToken.None);
+ await _emailStore.SetEmailAsync(user, Input.Email, CancellationToken.None);
+
+ var result = await _userManager.CreateAsync(user);
+ if (result.Succeeded)
+ {
+ result = await _userManager.AddLoginAsync(user, info);
+ if (result.Succeeded)
+ {
+ _logger.LogInformation(LoggerEventIds.UserCreatedByExternalProvider ,"User created an account using {Name} provider.", info.LoginProvider);
+
+ var userId = await _userManager.GetUserIdAsync(user);
+ var code = await _userManager.GenerateEmailConfirmationTokenAsync(user);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ var callbackUrl = Url.Page(
+ "/Account/ConfirmEmail",
+ pageHandler: null,
+ values: new { area = "Identity", userId = userId, code = code },
+ protocol: Request.Scheme);
+
+ await _emailSender.SendEmailAsync(Input.Email, "Confirm your email",
+ $"Please confirm your account by clicking here.");
+
+ // If account confirmation is required, we need to show the link if we don't have a real email sender
+ if (_userManager.Options.SignIn.RequireConfirmedAccount)
+ {
+ return RedirectToPage("./RegisterConfirmation", new { Email = Input.Email });
+ }
+
+ await _signInManager.SignInAsync(user, isPersistent: false, info.LoginProvider);
+ return LocalRedirect(returnUrl);
+ }
+ }
+ foreach (var error in result.Errors)
+ {
+ ModelState.AddModelError(string.Empty, error.Description);
+ }
+ }
+
+ ProviderDisplayName = info.ProviderDisplayName;
+ ReturnUrl = returnUrl;
+ return Page();
+ }
+
+ private TUser CreateUser()
+ {
+ try
+ {
+ return Activator.CreateInstance();
+ }
+ catch
+ {
+ throw new InvalidOperationException($"Can't create an instance of '{nameof(TUser)}'. " +
+ $"Ensure that '{nameof(TUser)}' is not an abstract class and has a parameterless constructor, or alternatively " +
+ $"override the external login page in /Areas/Identity/Pages/Account/ExternalLogin.cshtml");
+ }
+ }
+
+ private IUserEmailStore GetEmailStore()
+ {
+ if (!_userManager.SupportsUserEmail)
+ {
+ throw new NotSupportedException("The default UI requires a user store with email support.");
+ }
+ return (IUserEmailStore)_userStore;
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPassword.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPassword.cshtml
new file mode 100644
index 000000000000..4ba6691beb52
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPassword.cshtml
@@ -0,0 +1,26 @@
+@page
+@model ForgotPasswordModel
+@{
+ ViewData["Title"] = "Forgot your password?";
+}
+
+
@ViewData["Title"]
+
Enter your email.
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPassword.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPassword.cshtml.cs
new file mode 100644
index 000000000000..84fb9fa07ae7
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPassword.cshtml.cs
@@ -0,0 +1,97 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Text;
+using System.Text.Encodings.Web;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(ForgotPasswordModel<>))]
+ public abstract class ForgotPasswordModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ public string Email { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class ForgotPasswordModel : ForgotPasswordModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly IEmailSender _emailSender;
+
+ public ForgotPasswordModel(UserManager userManager, IEmailSender emailSender)
+ {
+ _userManager = userManager;
+ _emailSender = emailSender;
+ }
+
+ public override async Task OnPostAsync()
+ {
+ if (ModelState.IsValid)
+ {
+ var user = await _userManager.FindByEmailAsync(Input.Email);
+ if (user == null || !(await _userManager.IsEmailConfirmedAsync(user)))
+ {
+ // Don't reveal that the user does not exist or is not confirmed
+ return RedirectToPage("./ForgotPasswordConfirmation");
+ }
+
+ // For more information on how to enable account confirmation and password reset please
+ // visit https://go.microsoft.com/fwlink/?LinkID=532713
+ var code = await _userManager.GeneratePasswordResetTokenAsync(user);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ var callbackUrl = Url.Page(
+ "/Account/ResetPassword",
+ pageHandler: null,
+ values: new { area = "Identity", code },
+ protocol: Request.Scheme);
+
+ await _emailSender.SendEmailAsync(
+ Input.Email,
+ "Reset Password",
+ $"Please reset your password by clicking here.");
+
+ return RedirectToPage("./ForgotPasswordConfirmation");
+ }
+
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPasswordConfirmation.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPasswordConfirmation.cshtml
new file mode 100644
index 000000000000..4f5ae991d113
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPasswordConfirmation.cshtml
@@ -0,0 +1,10 @@
+@page
+@model ForgotPasswordConfirmation
+@{
+ ViewData["Title"] = "Forgot password confirmation";
+}
+
+
@ViewData["Title"]
+
+ Please check your email to reset your password.
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPasswordConfirmation.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPasswordConfirmation.cshtml.cs
new file mode 100644
index 000000000000..2bb86a927390
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ForgotPasswordConfirmation.cshtml.cs
@@ -0,0 +1,24 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ public class ForgotPasswordConfirmation : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public void OnGet()
+ {
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Lockout.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Lockout.cshtml
new file mode 100644
index 000000000000..4eded88208cb
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Lockout.cshtml
@@ -0,0 +1,10 @@
+@page
+@model LockoutModel
+@{
+ ViewData["Title"] = "Locked out";
+}
+
+
+
@ViewData["Title"]
+
This account has been locked out, please try again later.
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Lockout.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Lockout.cshtml.cs
new file mode 100644
index 000000000000..5e6965f0f6fb
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Lockout.cshtml.cs
@@ -0,0 +1,24 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ public class LockoutModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public void OnGet()
+ {
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Login.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Login.cshtml
new file mode 100644
index 000000000000..95bc1ef1fd9c
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Login.cshtml
@@ -0,0 +1,85 @@
+@page
+@model LoginModel
+
+@{
+ ViewData["Title"] = "Log in";
+}
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Login.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Login.cshtml.cs
new file mode 100644
index 000000000000..8445c5503c40
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Login.cshtml.cs
@@ -0,0 +1,158 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(LoginModel<>))]
+ public abstract class LoginModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public IList ExternalLogins { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string ReturnUrl { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string ErrorMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ public string Email { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [DataType(DataType.Password)]
+ public string Password { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Display(Name = "Remember me?")]
+ public bool RememberMe { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(string returnUrl = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync(string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class LoginModel : LoginModel where TUser : class
+ {
+ private readonly SignInManager _signInManager;
+ private readonly ILogger _logger;
+
+ public LoginModel(SignInManager signInManager, ILogger logger)
+ {
+ _signInManager = signInManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGetAsync(string returnUrl = null)
+ {
+ if (!string.IsNullOrEmpty(ErrorMessage))
+ {
+ ModelState.AddModelError(string.Empty, ErrorMessage);
+ }
+
+ returnUrl ??= Url.Content("~/");
+
+ // Clear the existing external cookie to ensure a clean login process
+ await HttpContext.SignOutAsync(IdentityConstants.ExternalScheme);
+
+ ExternalLogins = (await _signInManager.GetExternalAuthenticationSchemesAsync()).ToList();
+
+ ReturnUrl = returnUrl;
+ }
+
+ public override async Task OnPostAsync(string returnUrl = null)
+ {
+ returnUrl ??= Url.Content("~/");
+
+ ExternalLogins = (await _signInManager.GetExternalAuthenticationSchemesAsync()).ToList();
+
+ if (ModelState.IsValid)
+ {
+ // This doesn't count login failures towards account lockout
+ // To enable password failures to trigger account lockout, set lockoutOnFailure: true
+ var result = await _signInManager.PasswordSignInAsync(Input.Email, Input.Password, Input.RememberMe, lockoutOnFailure: false);
+ if (result.Succeeded)
+ {
+ _logger.LogInformation(LoggerEventIds.UserLogin, "User logged in.");
+ return LocalRedirect(returnUrl);
+ }
+ if (result.RequiresTwoFactor)
+ {
+ return RedirectToPage("./LoginWith2fa", new { ReturnUrl = returnUrl, RememberMe = Input.RememberMe });
+ }
+ if (result.IsLockedOut)
+ {
+ _logger.LogWarning(LoggerEventIds.UserLockout, "User account locked out.");
+ return RedirectToPage("./Lockout");
+ }
+ else
+ {
+ ModelState.AddModelError(string.Empty, "Invalid login attempt.");
+ return Page();
+ }
+ }
+
+ // If we got this far, something failed, redisplay form
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWith2fa.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWith2fa.cshtml
new file mode 100644
index 000000000000..5cc2aa2d1343
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWith2fa.cshtml
@@ -0,0 +1,41 @@
+@page
+@model LoginWith2faModel
+@{
+ ViewData["Title"] = "Two-factor authentication";
+}
+
+
@ViewData["Title"]
+
+
Your login is protected with an authenticator app. Enter your authenticator code below.
+
+@section Scripts {
+
+}
\ No newline at end of file
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWith2fa.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWith2fa.cshtml.cs
new file mode 100644
index 000000000000..e1598b2d34ef
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWith2fa.cshtml.cs
@@ -0,0 +1,149 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(LoginWith2faModel<>))]
+ public abstract class LoginWith2faModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool RememberMe { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string ReturnUrl { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [StringLength(7, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
+ [DataType(DataType.Text)]
+ [Display(Name = "Authenticator code")]
+ public string TwoFactorCode { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Display(Name = "Remember this machine")]
+ public bool RememberMachine { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(bool rememberMe, string returnUrl = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync(bool rememberMe, string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class LoginWith2faModel : LoginWith2faModel where TUser : class
+ {
+ private readonly SignInManager _signInManager;
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+
+ public LoginWith2faModel(
+ SignInManager signInManager,
+ UserManager userManager,
+ ILogger logger)
+ {
+ _signInManager = signInManager;
+ _userManager = userManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGetAsync(bool rememberMe, string returnUrl = null)
+ {
+ // Ensure the user has gone through the username & password screen first
+ var user = await _signInManager.GetTwoFactorAuthenticationUserAsync();
+
+ if (user == null)
+ {
+ throw new InvalidOperationException($"Unable to load two-factor authentication user.");
+ }
+
+ ReturnUrl = returnUrl;
+ RememberMe = rememberMe;
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync(bool rememberMe, string returnUrl = null)
+ {
+ if (!ModelState.IsValid)
+ {
+ return Page();
+ }
+
+ returnUrl = returnUrl ?? Url.Content("~/");
+
+ var user = await _signInManager.GetTwoFactorAuthenticationUserAsync();
+ if (user == null)
+ {
+ throw new InvalidOperationException($"Unable to load two-factor authentication user.");
+ }
+
+ var authenticatorCode = Input.TwoFactorCode.Replace(" ", string.Empty).Replace("-", string.Empty);
+
+ var result = await _signInManager.TwoFactorAuthenticatorSignInAsync(authenticatorCode, rememberMe, Input.RememberMachine);
+
+ var userId = await _userManager.GetUserIdAsync(user);
+
+ if (result.Succeeded)
+ {
+ _logger.LogInformation(LoggerEventIds.UserLoginWith2FA, "User logged in with 2fa.");
+ return LocalRedirect(returnUrl);
+ }
+ else if (result.IsLockedOut)
+ {
+ _logger.LogWarning(LoggerEventIds.UserLockout, "User account locked out.");
+ return RedirectToPage("./Lockout");
+ }
+ else
+ {
+ _logger.LogWarning(LoggerEventIds.InvalidAuthenticatorCode, "Invalid authenticator code entered.");
+ ModelState.AddModelError(string.Empty, "Invalid authenticator code.");
+ return Page();
+ }
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWithRecoveryCode.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWithRecoveryCode.cshtml
new file mode 100644
index 000000000000..5947903f87e3
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWithRecoveryCode.cshtml
@@ -0,0 +1,29 @@
+@page
+@model LoginWithRecoveryCodeModel
+@{
+ ViewData["Title"] = "Recovery code verification";
+}
+
+
@ViewData["Title"]
+
+
+ You have requested to log in with a recovery code. This login will not be remembered until you provide
+ an authenticator app code at log in or disable 2FA and log in again.
+
+
+
+
+
+
+
+@section Scripts {
+
+}
\ No newline at end of file
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWithRecoveryCode.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWithRecoveryCode.cshtml.cs
new file mode 100644
index 000000000000..a039ff98f408
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/LoginWithRecoveryCode.cshtml.cs
@@ -0,0 +1,132 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(LoginWithRecoveryCodeModel<>))]
+ public abstract class LoginWithRecoveryCodeModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string ReturnUrl { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ [Required]
+ [DataType(DataType.Text)]
+ [Display(Name = "Recovery Code")]
+ public string RecoveryCode { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(string returnUrl = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync(string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class LoginWithRecoveryCodeModel : LoginWithRecoveryCodeModel where TUser : class
+ {
+ private readonly SignInManager _signInManager;
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+
+ public LoginWithRecoveryCodeModel(
+ SignInManager signInManager,
+ UserManager userManager,
+ ILogger logger)
+ {
+ _signInManager = signInManager;
+ _userManager = userManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGetAsync(string returnUrl = null)
+ {
+ // Ensure the user has gone through the username & password screen first
+ var user = await _signInManager.GetTwoFactorAuthenticationUserAsync();
+ if (user == null)
+ {
+ throw new InvalidOperationException($"Unable to load two-factor authentication user.");
+ }
+
+ ReturnUrl = returnUrl;
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync(string returnUrl = null)
+ {
+ if (!ModelState.IsValid)
+ {
+ return Page();
+ }
+
+ var user = await _signInManager.GetTwoFactorAuthenticationUserAsync();
+ if (user == null)
+ {
+ throw new InvalidOperationException($"Unable to load two-factor authentication user.");
+ }
+
+ var recoveryCode = Input.RecoveryCode.Replace(" ", string.Empty);
+
+ var result = await _signInManager.TwoFactorRecoveryCodeSignInAsync(recoveryCode);
+
+ var userId = await _userManager.GetUserIdAsync(user);
+
+ if (result.Succeeded)
+ {
+ _logger.LogInformation(LoggerEventIds.UserLoginWithRecoveryCode, "User logged in with a recovery code.");
+ return LocalRedirect(returnUrl ?? Url.Content("~/"));
+ }
+ if (result.IsLockedOut)
+ {
+ _logger.LogWarning("User account locked out.");
+ return RedirectToPage("./Lockout");
+ }
+ else
+ {
+ _logger.LogWarning(LoggerEventIds.InvalidRecoveryCode, "Invalid recovery code entered.");
+ ModelState.AddModelError(string.Empty, "Invalid recovery code entered.");
+ return Page();
+ }
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Logout.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Logout.cshtml
new file mode 100644
index 000000000000..09bdfefb61ad
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Logout.cshtml
@@ -0,0 +1,21 @@
+@page
+@model LogoutModel
+@{
+ ViewData["Title"] = "Log out";
+}
+
+
+
You have successfully logged out of the application.
+ }
+ }
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Logout.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Logout.cshtml.cs
new file mode 100644
index 000000000000..f8de100c8f18
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Logout.cshtml.cs
@@ -0,0 +1,63 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(LogoutModel<>))]
+ public abstract class LogoutModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public void OnGet()
+ {
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPost(string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class LogoutModel : LogoutModel where TUser : class
+ {
+ private readonly SignInManager _signInManager;
+ private readonly ILogger _logger;
+
+ public LogoutModel(SignInManager signInManager, ILogger logger)
+ {
+ _signInManager = signInManager;
+ _logger = logger;
+ }
+
+ public override async Task OnPost(string returnUrl = null)
+ {
+ await _signInManager.SignOutAsync();
+ _logger.LogInformation(LoggerEventIds.UserLoggedOut, "User logged out.");
+ if (returnUrl != null)
+ {
+ return LocalRedirect(returnUrl);
+ }
+ else
+ {
+ // This needs to be a redirect so that the browser performs a new
+ // request and the identity for the user gets updated.
+ return RedirectToPage();
+ }
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ChangePassword.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ChangePassword.cshtml
new file mode 100644
index 000000000000..26218c9b3227
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ChangePassword.cshtml
@@ -0,0 +1,36 @@
+@page
+@model ChangePasswordModel
+@{
+ ViewData["Title"] = "Change password";
+ ViewData["ActivePage"] = ManageNavPages.ChangePassword;
+}
+
+
@ViewData["Title"]
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ChangePassword.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ChangePassword.cshtml.cs
new file mode 100644
index 000000000000..a3c803812d48
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ChangePassword.cshtml.cs
@@ -0,0 +1,145 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(ChangePasswordModel<>))]
+ public abstract class ChangePasswordModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [DataType(DataType.Password)]
+ [Display(Name = "Current password")]
+ public string OldPassword { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [StringLength(100, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
+ [DataType(DataType.Password)]
+ [Display(Name = "New password")]
+ public string NewPassword { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [DataType(DataType.Password)]
+ [Display(Name = "Confirm new password")]
+ [Compare("NewPassword", ErrorMessage = "The new password and confirmation password do not match.")]
+ public string ConfirmPassword { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class ChangePasswordModel : ChangePasswordModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+ private readonly ILogger _logger;
+
+ public ChangePasswordModel(
+ UserManager userManager,
+ SignInManager signInManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var hasPassword = await _userManager.HasPasswordAsync(user);
+ if (!hasPassword)
+ {
+ return RedirectToPage("./SetPassword");
+ }
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ if (!ModelState.IsValid)
+ {
+ return Page();
+ }
+
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var changePasswordResult = await _userManager.ChangePasswordAsync(user, Input.OldPassword, Input.NewPassword);
+ if (!changePasswordResult.Succeeded)
+ {
+ foreach (var error in changePasswordResult.Errors)
+ {
+ ModelState.AddModelError(string.Empty, error.Description);
+ }
+ return Page();
+ }
+
+ await _signInManager.RefreshSignInAsync(user);
+ _logger.LogInformation(LoggerEventIds.PasswordChanged, "User changed their password successfully.");
+ StatusMessage = "Your password has been changed.";
+
+ return RedirectToPage();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DeletePersonalData.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DeletePersonalData.cshtml
new file mode 100644
index 000000000000..6b31398eb285
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DeletePersonalData.cshtml
@@ -0,0 +1,33 @@
+@page
+@model DeletePersonalDataModel
+@{
+ ViewData["Title"] = "Delete Personal Data";
+ ViewData["ActivePage"] = ManageNavPages.PersonalData;
+}
+
+
@ViewData["Title"]
+
+
+
+ Deleting this data will permanently remove your account, and this cannot be recovered.
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DeletePersonalData.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DeletePersonalData.cshtml.cs
new file mode 100644
index 000000000000..eeb34fc24da1
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DeletePersonalData.cshtml.cs
@@ -0,0 +1,121 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(DeletePersonalDataModel<>))]
+ public abstract class DeletePersonalDataModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [DataType(DataType.Password)]
+ public string Password { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool RequirePassword { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGet() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class DeletePersonalDataModel : DeletePersonalDataModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+ private readonly ILogger _logger;
+
+ public DeletePersonalDataModel(
+ UserManager userManager,
+ SignInManager signInManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGet()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ RequirePassword = await _userManager.HasPasswordAsync(user);
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ RequirePassword = await _userManager.HasPasswordAsync(user);
+ if (RequirePassword)
+ {
+ if (!await _userManager.CheckPasswordAsync(user, Input.Password))
+ {
+ ModelState.AddModelError(string.Empty, "Incorrect password.");
+ return Page();
+ }
+ }
+
+ var result = await _userManager.DeleteAsync(user);
+ var userId = await _userManager.GetUserIdAsync(user);
+ if (!result.Succeeded)
+ {
+ throw new InvalidOperationException($"Unexpected error occurred deleting user.");
+ }
+
+ await _signInManager.SignOutAsync();
+
+ _logger.LogInformation(LoggerEventIds.UserDeleted, "User deleted themselves.");
+
+ return Redirect("~/");
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Disable2fa.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Disable2fa.cshtml
new file mode 100644
index 000000000000..41a5ff3c1b76
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Disable2fa.cshtml
@@ -0,0 +1,25 @@
+@page
+@model Disable2faModel
+@{
+ ViewData["Title"] = "Disable two-factor authentication (2FA)";
+ ViewData["ActivePage"] = ManageNavPages.TwoFactorAuthentication;
+}
+
+
+
@ViewData["Title"]
+
+
+
+ This action only disables 2FA.
+
+
+ Disabling 2FA does not change the keys used in authenticator apps. If you wish to change the key
+ used in an authenticator app you should reset your authenticator keys.
+
+
+
+
+
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Disable2fa.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Disable2fa.cshtml.cs
new file mode 100644
index 000000000000..605e832860a0
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Disable2fa.cshtml.cs
@@ -0,0 +1,87 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(Disable2faModel<>))]
+ public abstract class Disable2faModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGet() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class Disable2faModel : Disable2faModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+
+ public Disable2faModel(
+ UserManager userManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGet()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ if (!await _userManager.GetTwoFactorEnabledAsync(user))
+ {
+ throw new InvalidOperationException($"Cannot disable 2FA for user as it's not currently enabled.");
+ }
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var disable2faResult = await _userManager.SetTwoFactorEnabledAsync(user, false);
+ if (!disable2faResult.Succeeded)
+ {
+ throw new InvalidOperationException($"Unexpected error occurred disabling 2FA.");
+ }
+
+ _logger.LogInformation(LoggerEventIds.TwoFADisabled, "User has disabled 2fa.");
+ StatusMessage = "2fa has been disabled. You can reenable 2fa when you setup an authenticator app";
+ return RedirectToPage("./TwoFactorAuthentication");
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DownloadPersonalData.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DownloadPersonalData.cshtml
new file mode 100644
index 000000000000..93f631f8fcac
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DownloadPersonalData.cshtml
@@ -0,0 +1,12 @@
+@page
+@model DownloadPersonalDataModel
+@{
+ ViewData["Title"] = "Download Your Data";
+ ViewData["ActivePage"] = ManageNavPages.PersonalData;
+}
+
+
@ViewData["Title"]
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DownloadPersonalData.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DownloadPersonalData.cshtml.cs
new file mode 100644
index 000000000000..1781309f1bcd
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/DownloadPersonalData.cshtml.cs
@@ -0,0 +1,85 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Text.Json;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(DownloadPersonalDataModel<>))]
+ public abstract class DownloadPersonalDataModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual IActionResult OnGet() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class DownloadPersonalDataModel : DownloadPersonalDataModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+
+ public DownloadPersonalDataModel(
+ UserManager userManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _logger = logger;
+ }
+
+ public override IActionResult OnGet()
+ {
+ return NotFound();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ _logger.LogInformation(LoggerEventIds.PersonalDataRequested, "User asked for their personal data.");
+
+ // Only include personal data for download
+ var personalData = new Dictionary();
+ var personalDataProps = typeof(TUser).GetProperties().Where(
+ prop => Attribute.IsDefined(prop, typeof(PersonalDataAttribute)));
+ foreach (var p in personalDataProps)
+ {
+ personalData.Add(p.Name, p.GetValue(user)?.ToString() ?? "null");
+ }
+
+ var logins = await _userManager.GetLoginsAsync(user);
+ foreach (var l in logins)
+ {
+ personalData.Add($"{l.LoginProvider} external login provider key", l.ProviderKey);
+ }
+
+ personalData.Add($"Authenticator Key", await _userManager.GetAuthenticatorKeyAsync(user));
+
+ Response.Headers.Add("Content-Disposition", "attachment; filename=PersonalData.json");
+ return new FileContentResult(JsonSerializer.SerializeToUtf8Bytes(personalData), "application/json");
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Email.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Email.cshtml
new file mode 100644
index 000000000000..dc74108e8892
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Email.cshtml
@@ -0,0 +1,43 @@
+@page
+@model EmailModel
+@{
+ ViewData["Title"] = "Manage Email";
+ ViewData["ActivePage"] = ManageNavPages.Email;
+}
+
+
@ViewData["Title"]
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Email.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Email.cshtml.cs
new file mode 100644
index 000000000000..004bce4f876a
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Email.cshtml.cs
@@ -0,0 +1,195 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Text;
+using System.Text.Encodings.Web;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(EmailModel<>))]
+ public abstract class EmailModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string Email { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool IsEmailConfirmed { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ [Display(Name = "New email")]
+ public string NewEmail { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostChangeEmailAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostSendVerificationEmailAsync() => throw new NotImplementedException();
+ }
+
+ internal class EmailModel : EmailModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+ private readonly IEmailSender _emailSender;
+
+ public EmailModel(
+ UserManager userManager,
+ SignInManager signInManager,
+ IEmailSender emailSender)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ _emailSender = emailSender;
+ }
+
+ private async Task LoadAsync(TUser user)
+ {
+ var email = await _userManager.GetEmailAsync(user);
+ Email = email;
+
+ Input = new InputModel
+ {
+ NewEmail = email,
+ };
+
+ IsEmailConfirmed = await _userManager.IsEmailConfirmedAsync(user);
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ await LoadAsync(user);
+ return Page();
+ }
+
+ public override async Task OnPostChangeEmailAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ if (!ModelState.IsValid)
+ {
+ await LoadAsync(user);
+ return Page();
+ }
+
+ var email = await _userManager.GetEmailAsync(user);
+ if (Input.NewEmail != email)
+ {
+ var userId = await _userManager.GetUserIdAsync(user);
+ var code = await _userManager.GenerateChangeEmailTokenAsync(user, Input.NewEmail);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ var callbackUrl = Url.Page(
+ "/Account/ConfirmEmailChange",
+ pageHandler: null,
+ values: new { area = "Identity", userId = userId, email = Input.NewEmail, code = code },
+ protocol: Request.Scheme);
+ await _emailSender.SendEmailAsync(
+ Input.NewEmail,
+ "Confirm your email",
+ $"Please confirm your account by clicking here.");
+
+ StatusMessage = "Confirmation link to change email sent. Please check your email.";
+ return RedirectToPage();
+ }
+
+ StatusMessage = "Your email is unchanged.";
+ return RedirectToPage();
+ }
+
+ public override async Task OnPostSendVerificationEmailAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ if (!ModelState.IsValid)
+ {
+ await LoadAsync(user);
+ return Page();
+ }
+
+ var userId = await _userManager.GetUserIdAsync(user);
+ var email = await _userManager.GetEmailAsync(user);
+ var code = await _userManager.GenerateEmailConfirmationTokenAsync(user);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ var callbackUrl = Url.Page(
+ "/Account/ConfirmEmail",
+ pageHandler: null,
+ values: new { area = "Identity", userId = userId, code = code },
+ protocol: Request.Scheme);
+ await _emailSender.SendEmailAsync(
+ email,
+ "Confirm your email",
+ $"Please confirm your account by clicking here.");
+
+ StatusMessage = "Verification email sent. Please check your email.";
+ return RedirectToPage();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/EnableAuthenticator.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/EnableAuthenticator.cshtml
new file mode 100644
index 000000000000..924ea1f4c6d2
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/EnableAuthenticator.cshtml
@@ -0,0 +1,53 @@
+@page
+@model EnableAuthenticatorModel
+@{
+ ViewData["Title"] = "Configure authenticator app";
+ ViewData["ActivePage"] = ManageNavPages.TwoFactorAuthentication;
+}
+
+
+
@ViewData["Title"]
+
+
To use an authenticator app go through the following steps:
+
+
+
+ Download a two-factor authenticator app like Microsoft Authenticator for
+ Android and
+ iOS or
+ Google Authenticator for
+ Android and
+ iOS.
+
+
+
+
Scan the QR Code or enter this key @Model.SharedKey into your two factor authenticator app. Spaces and casing do not matter.
+ Once you have scanned the QR code or input the key above, your two factor authentication app will provide you
+ with a unique code. Enter the code in the confirmation box below.
+
+
+
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/EnableAuthenticator.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/EnableAuthenticator.cshtml.cs
new file mode 100644
index 000000000000..cafa84ca3a05
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/EnableAuthenticator.cshtml.cs
@@ -0,0 +1,206 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Globalization;
+using System.Linq;
+using System.Text;
+using System.Text.Encodings.Web;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(EnableAuthenticatorModel<>))]
+ public class EnableAuthenticatorModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string SharedKey { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string AuthenticatorUri { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string[] RecoveryCodes { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [StringLength(7, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
+ [DataType(DataType.Text)]
+ [Display(Name = "Verification Code")]
+ public string Code { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class EnableAuthenticatorModel : EnableAuthenticatorModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+ private readonly UrlEncoder _urlEncoder;
+
+ private const string AuthenticatorUriFormat = "otpauth://totp/{0}:{1}?secret={2}&issuer={0}&digits=6";
+
+ public EnableAuthenticatorModel(
+ UserManager userManager,
+ ILogger logger,
+ UrlEncoder urlEncoder)
+ {
+ _userManager = userManager;
+ _logger = logger;
+ _urlEncoder = urlEncoder;
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ await LoadSharedKeyAndQrCodeUriAsync(user);
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ if (!ModelState.IsValid)
+ {
+ await LoadSharedKeyAndQrCodeUriAsync(user);
+ return Page();
+ }
+
+ // Strip spaces and hyphens
+ var verificationCode = Input.Code.Replace(" ", string.Empty).Replace("-", string.Empty);
+
+ var is2faTokenValid = await _userManager.VerifyTwoFactorTokenAsync(
+ user, _userManager.Options.Tokens.AuthenticatorTokenProvider, verificationCode);
+
+ if (!is2faTokenValid)
+ {
+ ModelState.AddModelError("Input.Code", "Verification code is invalid.");
+ await LoadSharedKeyAndQrCodeUriAsync(user);
+ return Page();
+ }
+
+ await _userManager.SetTwoFactorEnabledAsync(user, true);
+ var userId = await _userManager.GetUserIdAsync(user);
+ _logger.LogInformation(LoggerEventIds.TwoFAEnabled, "User has enabled 2FA with an authenticator app.");
+
+ StatusMessage = "Your authenticator app has been verified.";
+
+ if (await _userManager.CountRecoveryCodesAsync(user) == 0)
+ {
+ var recoveryCodes = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 10);
+ RecoveryCodes = recoveryCodes.ToArray();
+ return RedirectToPage("./ShowRecoveryCodes");
+ }
+ else
+ {
+ return RedirectToPage("./TwoFactorAuthentication");
+ }
+ }
+
+ private async Task LoadSharedKeyAndQrCodeUriAsync(TUser user)
+ {
+ // Load the authenticator key & QR code URI to display on the form
+ var unformattedKey = await _userManager.GetAuthenticatorKeyAsync(user);
+ if (string.IsNullOrEmpty(unformattedKey))
+ {
+ await _userManager.ResetAuthenticatorKeyAsync(user);
+ unformattedKey = await _userManager.GetAuthenticatorKeyAsync(user);
+ }
+
+ SharedKey = FormatKey(unformattedKey);
+
+ var email = await _userManager.GetEmailAsync(user);
+ AuthenticatorUri = GenerateQrCodeUri(email, unformattedKey);
+ }
+
+ private string FormatKey(string unformattedKey)
+ {
+ var result = new StringBuilder();
+ int currentPosition = 0;
+ while (currentPosition + 4 < unformattedKey.Length)
+ {
+ result.Append(unformattedKey.AsSpan(currentPosition, 4)).Append(' ');
+ currentPosition += 4;
+ }
+ if (currentPosition < unformattedKey.Length)
+ {
+ result.Append(unformattedKey.AsSpan(currentPosition));
+ }
+
+ return result.ToString().ToLowerInvariant();
+ }
+
+ private string GenerateQrCodeUri(string email, string unformattedKey)
+ {
+ return string.Format(
+ CultureInfo.InvariantCulture,
+ AuthenticatorUriFormat,
+ _urlEncoder.Encode("Microsoft.AspNetCore.Identity.UI"),
+ _urlEncoder.Encode(email),
+ unformattedKey);
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ExternalLogins.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ExternalLogins.cshtml
new file mode 100644
index 000000000000..7c397e576565
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ExternalLogins.cshtml
@@ -0,0 +1,53 @@
+@page
+@model ExternalLoginsModel
+@{
+ ViewData["Title"] = "Manage your external logins";
+ ViewData["ActivePage"] = ManageNavPages.ExternalLogins;
+}
+
+
+@if (Model.CurrentLogins?.Count > 0)
+{
+
Registered Logins
+
+
+ @foreach (var login in Model.CurrentLogins)
+ {
+
+
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ExternalLogins.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ExternalLogins.cshtml.cs
new file mode 100644
index 000000000000..b16d3a12833a
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ExternalLogins.cshtml.cs
@@ -0,0 +1,171 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(ExternalLoginsModel<>))]
+ public abstract class ExternalLoginsModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public IList CurrentLogins { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public IList OtherLogins { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool ShowRemoveButton { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostRemoveLoginAsync(string loginProvider, string providerKey) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostLinkLoginAsync(string provider) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetLinkLoginCallbackAsync() => throw new NotImplementedException();
+ }
+
+ internal class ExternalLoginsModel : ExternalLoginsModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+ private readonly IUserStore _userStore;
+
+ public ExternalLoginsModel(
+ UserManager userManager,
+ SignInManager signInManager,
+ IUserStore userStore)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ _userStore = userStore;
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ CurrentLogins = await _userManager.GetLoginsAsync(user);
+ OtherLogins = (await _signInManager.GetExternalAuthenticationSchemesAsync())
+ .Where(auth => CurrentLogins.All(ul => auth.Name != ul.LoginProvider))
+ .ToList();
+
+ string passwordHash = null;
+ if (_userStore is IUserPasswordStore userPasswordStore)
+ {
+ passwordHash = await userPasswordStore.GetPasswordHashAsync(user, HttpContext.RequestAborted);
+ }
+
+ ShowRemoveButton = passwordHash != null || CurrentLogins.Count > 1;
+ return Page();
+ }
+
+ public override async Task OnPostRemoveLoginAsync(string loginProvider, string providerKey)
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var result = await _userManager.RemoveLoginAsync(user, loginProvider, providerKey);
+ if (!result.Succeeded)
+ {
+ StatusMessage = "The external login was not removed.";
+ return RedirectToPage();
+ }
+
+ await _signInManager.RefreshSignInAsync(user);
+ StatusMessage = "The external login was removed.";
+ return RedirectToPage();
+ }
+
+ public override async Task OnPostLinkLoginAsync(string provider)
+ {
+ // Clear the existing external cookie to ensure a clean login process
+ await HttpContext.SignOutAsync(IdentityConstants.ExternalScheme);
+
+ // Request a redirect to the external login provider to link a login for the current user
+ var redirectUrl = Url.Page("./ExternalLogins", pageHandler: "LinkLoginCallback");
+ var properties = _signInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl, _userManager.GetUserId(User));
+ return new ChallengeResult(provider, properties);
+ }
+
+ public override async Task OnGetLinkLoginCallbackAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var userId = await _userManager.GetUserIdAsync(user);
+ var info = await _signInManager.GetExternalLoginInfoAsync(userId);
+ if (info == null)
+ {
+ throw new InvalidOperationException($"Unexpected error occurred loading external login info.");
+ }
+
+ var result = await _userManager.AddLoginAsync(user, info);
+ if (!result.Succeeded)
+ {
+ StatusMessage = "The external login was not added. External logins can only be associated with one account.";
+ return RedirectToPage();
+ }
+
+ // Clear the existing external cookie to ensure a clean login process
+ await HttpContext.SignOutAsync(IdentityConstants.ExternalScheme);
+
+ StatusMessage = "The external login was added.";
+ return RedirectToPage();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/GenerateRecoveryCodes.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/GenerateRecoveryCodes.cshtml
new file mode 100644
index 000000000000..81dbc35ead0e
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/GenerateRecoveryCodes.cshtml
@@ -0,0 +1,27 @@
+@page
+@model GenerateRecoveryCodesModel
+@{
+ ViewData["Title"] = "Generate two-factor authentication (2FA) recovery codes";
+ ViewData["ActivePage"] = ManageNavPages.TwoFactorAuthentication;
+}
+
+
+
@ViewData["Title"]
+
+
+
+ Put these codes in a safe place.
+
+
+ If you lose your device and don't have the recovery codes you will lose access to your account.
+
+
+ Generating new recovery codes does not change the keys used in authenticator apps. If you wish to change the key
+ used in an authenticator app you should reset your authenticator keys.
+
+
+
+
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/GenerateRecoveryCodes.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/GenerateRecoveryCodes.cshtml.cs
new file mode 100644
index 000000000000..6a040d41256a
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/GenerateRecoveryCodes.cshtml.cs
@@ -0,0 +1,99 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(GenerateRecoveryCodesModel<>))]
+ public abstract class GenerateRecoveryCodesModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string[] RecoveryCodes { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class GenerateRecoveryCodesModel : GenerateRecoveryCodesModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+
+ public GenerateRecoveryCodesModel(
+ UserManager userManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var isTwoFactorEnabled = await _userManager.GetTwoFactorEnabledAsync(user);
+ if (!isTwoFactorEnabled)
+ {
+ throw new InvalidOperationException($"Cannot generate recovery codes for user because they do not have 2FA enabled.");
+ }
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var isTwoFactorEnabled = await _userManager.GetTwoFactorEnabledAsync(user);
+ if (!isTwoFactorEnabled)
+ {
+ throw new InvalidOperationException($"Cannot generate recovery codes for user as they do not have 2FA enabled.");
+ }
+
+ var recoveryCodes = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 10);
+ RecoveryCodes = recoveryCodes.ToArray();
+
+ _logger.LogInformation(LoggerEventIds.TwoFARecoveryGenerated, "User has generated new 2FA recovery codes.");
+ StatusMessage = "You have generated new recovery codes.";
+ return RedirectToPage("./ShowRecoveryCodes");
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Index.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Index.cshtml
new file mode 100644
index 000000000000..80d1d0af7541
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Index.cshtml
@@ -0,0 +1,30 @@
+@page
+@model IndexModel
+@{
+ ViewData["Title"] = "Profile";
+ ViewData["ActivePage"] = ManageNavPages.Index;
+}
+
+
@ViewData["Title"]
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Index.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Index.cshtml.cs
new file mode 100644
index 000000000000..87340ab5fb08
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/Index.cshtml.cs
@@ -0,0 +1,137 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Text.Encodings.Web;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(IndexModel<>))]
+ public abstract class IndexModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string Username { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Phone]
+ [Display(Name = "Phone number")]
+ public string PhoneNumber { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class IndexModel : IndexModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+
+ public IndexModel(
+ UserManager userManager,
+ SignInManager signInManager)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ }
+
+ private async Task LoadAsync(TUser user)
+ {
+ var userName = await _userManager.GetUserNameAsync(user);
+ var phoneNumber = await _userManager.GetPhoneNumberAsync(user);
+
+ Username = userName;
+
+ Input = new InputModel
+ {
+ PhoneNumber = phoneNumber
+ };
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ await LoadAsync(user);
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ if (!ModelState.IsValid)
+ {
+ await LoadAsync(user);
+ return Page();
+ }
+
+ var phoneNumber = await _userManager.GetPhoneNumberAsync(user);
+ if (Input.PhoneNumber != phoneNumber)
+ {
+ var setPhoneResult = await _userManager.SetPhoneNumberAsync(user, Input.PhoneNumber);
+ if (!setPhoneResult.Succeeded)
+ {
+ StatusMessage = "Unexpected error when trying to set phone number.";
+ return RedirectToPage();
+ }
+ }
+
+ await _signInManager.RefreshSignInAsync(user);
+ StatusMessage = "Your profile has been updated";
+ return RedirectToPage();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ManageNavPages.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ManageNavPages.cs
new file mode 100644
index 000000000000..4fd606bbf99f
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ManageNavPages.cs
@@ -0,0 +1,122 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using Microsoft.AspNetCore.Mvc.Rendering;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static class ManageNavPages
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string Index => "Index";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string Email => "Email";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string ChangePassword => "ChangePassword";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string DownloadPersonalData => "DownloadPersonalData";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string DeletePersonalData => "DeletePersonalData";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string ExternalLogins => "ExternalLogins";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string PersonalData => "PersonalData";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string TwoFactorAuthentication => "TwoFactorAuthentication";
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string IndexNavClass(ViewContext viewContext) => PageNavClass(viewContext, Index);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string EmailNavClass(ViewContext viewContext) => PageNavClass(viewContext, Email);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string ChangePasswordNavClass(ViewContext viewContext) => PageNavClass(viewContext, ChangePassword);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string DownloadPersonalDataNavClass(ViewContext viewContext) => PageNavClass(viewContext, DownloadPersonalData);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string DeletePersonalDataNavClass(ViewContext viewContext) => PageNavClass(viewContext, DeletePersonalData);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string ExternalLoginsNavClass(ViewContext viewContext) => PageNavClass(viewContext, ExternalLogins);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string PersonalDataNavClass(ViewContext viewContext) => PageNavClass(viewContext, PersonalData);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string TwoFactorAuthenticationNavClass(ViewContext viewContext) => PageNavClass(viewContext, TwoFactorAuthentication);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public static string PageNavClass(ViewContext viewContext, string page)
+ {
+ var activePage = viewContext.ViewData["ActivePage"] as string
+ ?? System.IO.Path.GetFileNameWithoutExtension(viewContext.ActionDescriptor.DisplayName);
+ return string.Equals(activePage, page, StringComparison.OrdinalIgnoreCase) ? "active" : null;
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/PersonalData.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/PersonalData.cshtml
new file mode 100644
index 000000000000..0d9e75cf80c7
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/PersonalData.cshtml
@@ -0,0 +1,27 @@
+@page
+@model PersonalDataModel
+@{
+ ViewData["Title"] = "Personal Data";
+ ViewData["ActivePage"] = ManageNavPages.PersonalData;
+}
+
+
@ViewData["Title"]
+
+
+
+
Your account contains personal data that you have given us. This page allows you to download or delete that data.
+
+ Deleting this data will permanently remove your account, and this cannot be recovered.
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/PersonalData.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/PersonalData.cshtml.cs
new file mode 100644
index 000000000000..7652b412c988
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/PersonalData.cshtml.cs
@@ -0,0 +1,50 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(PersonalDataModel<>))]
+ public abstract class PersonalDataModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGet() => throw new NotImplementedException();
+ }
+
+ internal class PersonalDataModel : PersonalDataModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly ILogger _logger;
+
+ public PersonalDataModel(
+ UserManager userManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGet()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ResetAuthenticator.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ResetAuthenticator.cshtml
new file mode 100644
index 000000000000..3917ed29edda
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ResetAuthenticator.cshtml
@@ -0,0 +1,24 @@
+@page
+@model ResetAuthenticatorModel
+@{
+ ViewData["Title"] = "Reset authenticator key";
+ ViewData["ActivePage"] = ManageNavPages.TwoFactorAuthentication;
+}
+
+
+
@ViewData["Title"]
+
+
+
+ If you reset your authenticator key your authenticator app will not work until you reconfigure it.
+
+
+ This process disables 2FA until you verify your authenticator app.
+ If you do not complete your authenticator app configuration you may lose access to your account.
+
+
+
+
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ResetAuthenticator.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ResetAuthenticator.cshtml.cs
new file mode 100644
index 000000000000..a5e2c3593650
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ResetAuthenticator.cshtml.cs
@@ -0,0 +1,85 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(ResetAuthenticatorModel<>))]
+ public abstract class ResetAuthenticatorModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGet() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class ResetAuthenticatorModel : ResetAuthenticatorModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+ private readonly ILogger _logger;
+
+ public ResetAuthenticatorModel(
+ UserManager userManager,
+ SignInManager signInManager,
+ ILogger logger)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGet()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ await _userManager.SetTwoFactorEnabledAsync(user, false);
+ await _userManager.ResetAuthenticatorKeyAsync(user);
+ var userId = await _userManager.GetUserIdAsync(user);
+ _logger.LogInformation(LoggerEventIds.AuthenticationAppKeyReset, "User has reset their authentication app key.");
+
+ await _signInManager.RefreshSignInAsync(user);
+ StatusMessage = "Your authenticator app key has been reset, you will need to configure your authenticator app using the new key.";
+
+ return RedirectToPage("./EnableAuthenticator");
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/SetPassword.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/SetPassword.cshtml
new file mode 100644
index 000000000000..88be6cf11df2
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/SetPassword.cshtml
@@ -0,0 +1,35 @@
+@page
+@model SetPasswordModel
+@{
+ ViewData["Title"] = "Set password";
+ ViewData["ActivePage"] = ManageNavPages.ChangePassword;
+}
+
+
Set your password
+
+
+ You do not have a local username/password for this site. Add a local
+ account so you can log in without an external login.
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/SetPassword.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/SetPassword.cshtml.cs
new file mode 100644
index 000000000000..7a8752582460
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/SetPassword.cshtml.cs
@@ -0,0 +1,132 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(SetPasswordModel<>))]
+ public abstract class SetPasswordModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [StringLength(100, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
+ [DataType(DataType.Password)]
+ [Display(Name = "New password")]
+ public string NewPassword { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [DataType(DataType.Password)]
+ [Display(Name = "Confirm new password")]
+ [Compare("NewPassword", ErrorMessage = "The new password and confirmation password do not match.")]
+ public string ConfirmPassword { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class SetPasswordModel : SetPasswordModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+
+ public SetPasswordModel(
+ UserManager userManager,
+ SignInManager signInManager)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var hasPassword = await _userManager.HasPasswordAsync(user);
+
+ if (hasPassword)
+ {
+ return RedirectToPage("./ChangePassword");
+ }
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ if (!ModelState.IsValid)
+ {
+ return Page();
+ }
+
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ var addPasswordResult = await _userManager.AddPasswordAsync(user, Input.NewPassword);
+ if (!addPasswordResult.Succeeded)
+ {
+ foreach (var error in addPasswordResult.Errors)
+ {
+ ModelState.AddModelError(string.Empty, error.Description);
+ }
+ return Page();
+ }
+
+ await _signInManager.RefreshSignInAsync(user);
+ StatusMessage = "Your password has been set.";
+
+ return RedirectToPage();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ShowRecoveryCodes.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ShowRecoveryCodes.cshtml
new file mode 100644
index 000000000000..49a85188ee15
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ShowRecoveryCodes.cshtml
@@ -0,0 +1,25 @@
+@page
+@model ShowRecoveryCodesModel
+@{
+ ViewData["Title"] = "Recovery codes";
+ ViewData["ActivePage"] = "TwoFactorAuthentication";
+}
+
+
+
@ViewData["Title"]
+
+
+ Put these codes in a safe place.
+
+
+ If you lose your device and don't have the recovery codes you will lose access to your account.
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ShowRecoveryCodes.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ShowRecoveryCodes.cshtml.cs
new file mode 100644
index 000000000000..97e9e1099007
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/ShowRecoveryCodes.cshtml.cs
@@ -0,0 +1,43 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class ShowRecoveryCodesModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string[] RecoveryCodes { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public IActionResult OnGet()
+ {
+ if (RecoveryCodes == null || RecoveryCodes.Length == 0)
+ {
+ return RedirectToPage("./TwoFactorAuthentication");
+ }
+
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/TwoFactorAuthentication.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/TwoFactorAuthentication.cshtml
new file mode 100644
index 000000000000..6db5b32cbb12
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/TwoFactorAuthentication.cshtml
@@ -0,0 +1,71 @@
+@page
+@using Microsoft.AspNetCore.Http.Features
+@model TwoFactorAuthenticationModel
+@{
+ ViewData["Title"] = "Two-factor authentication (2FA)";
+ ViewData["ActivePage"] = ManageNavPages.TwoFactorAuthentication;
+}
+
+
+
+ Privacy and cookie policy have not been accepted.
+
You must accept the policy before you can enable two factor authentication.
+
+ }
+}
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/TwoFactorAuthentication.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/TwoFactorAuthentication.cshtml.cs
new file mode 100644
index 000000000000..4862e26eb4eb
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/TwoFactorAuthentication.cshtml.cs
@@ -0,0 +1,107 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Manage.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [IdentityDefaultUI(typeof(TwoFactorAuthenticationModel<>))]
+ public abstract class TwoFactorAuthenticationModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool HasAuthenticator { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public int RecoveryCodesLeft { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public bool Is2faEnabled { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool IsMachineRemembered { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [TempData]
+ public string StatusMessage { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class TwoFactorAuthenticationModel : TwoFactorAuthenticationModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly SignInManager _signInManager;
+ private readonly ILogger _logger;
+
+ public TwoFactorAuthenticationModel(
+ UserManager userManager, SignInManager signInManager, ILogger logger)
+ {
+ _userManager = userManager;
+ _signInManager = signInManager;
+ _logger = logger;
+ }
+
+ public override async Task OnGetAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ HasAuthenticator = await _userManager.GetAuthenticatorKeyAsync(user) != null;
+ Is2faEnabled = await _userManager.GetTwoFactorEnabledAsync(user);
+ IsMachineRemembered = await _signInManager.IsTwoFactorClientRememberedAsync(user);
+ RecoveryCodesLeft = await _userManager.CountRecoveryCodesAsync(user);
+
+ return Page();
+ }
+
+ public override async Task OnPostAsync()
+ {
+ var user = await _userManager.GetUserAsync(User);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
+ }
+
+ await _signInManager.ForgetTwoFactorClientAsync();
+ StatusMessage = "The current browser has been forgotten. When you login again from this browser you will be prompted for your 2fa code.";
+ return RedirectToPage();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/_Layout.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/_Layout.cshtml
new file mode 100644
index 000000000000..17e797cf093d
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Manage/_Layout.cshtml
@@ -0,0 +1,29 @@
+@{
+ if (ViewData.TryGetValue("ParentLayout", out var parentLayout))
+ {
+ Layout = (string)parentLayout;
+ }
+ else
+ {
+ Layout = "/Areas/Identity/Pages/_Layout.cshtml";
+ }
+}
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Register.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Register.cshtml.cs
new file mode 100644
index 000000000000..907f04026137
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/Register.cshtml.cs
@@ -0,0 +1,198 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using System.Text;
+using System.Text.Encodings.Web;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+using Microsoft.Extensions.Logging;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(RegisterModel<>))]
+ public abstract class RegisterModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string ReturnUrl { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public IList ExternalLogins { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ [Display(Name = "Email")]
+ public string Email { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [StringLength(100, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
+ [DataType(DataType.Password)]
+ [Display(Name = "Password")]
+ public string Password { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [DataType(DataType.Password)]
+ [Display(Name = "Confirm password")]
+ [Compare("Password", ErrorMessage = "The password and confirmation password do not match.")]
+ public string ConfirmPassword { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(string returnUrl = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync(string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class RegisterModel : RegisterModel where TUser : class
+ {
+ private readonly SignInManager _signInManager;
+ private readonly UserManager _userManager;
+ private readonly IUserStore _userStore;
+ private readonly IUserEmailStore _emailStore;
+ private readonly ILogger _logger;
+ private readonly IEmailSender _emailSender;
+
+ public RegisterModel(
+ UserManager userManager,
+ IUserStore userStore,
+ SignInManager signInManager,
+ ILogger logger,
+ IEmailSender emailSender)
+ {
+ _userManager = userManager;
+ _userStore = userStore;
+ _emailStore = GetEmailStore();
+ _signInManager = signInManager;
+ _logger = logger;
+ _emailSender = emailSender;
+ }
+
+ public override async Task OnGetAsync(string returnUrl = null)
+ {
+ ReturnUrl = returnUrl;
+ ExternalLogins = (await _signInManager.GetExternalAuthenticationSchemesAsync()).ToList();
+ }
+
+ public override async Task OnPostAsync(string returnUrl = null)
+ {
+ returnUrl ??= Url.Content("~/");
+ ExternalLogins = (await _signInManager.GetExternalAuthenticationSchemesAsync()).ToList();
+ if (ModelState.IsValid)
+ {
+ var user = CreateUser();
+
+ await _userStore.SetUserNameAsync(user, Input.Email, CancellationToken.None);
+ await _emailStore.SetEmailAsync(user, Input.Email, CancellationToken.None);
+ var result = await _userManager.CreateAsync(user, Input.Password);
+
+ if (result.Succeeded)
+ {
+ _logger.LogInformation(LoggerEventIds.UserCreated, "User created a new account with password.");
+
+ var userId = await _userManager.GetUserIdAsync(user);
+ var code = await _userManager.GenerateEmailConfirmationTokenAsync(user);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ var callbackUrl = Url.Page(
+ "/Account/ConfirmEmail",
+ pageHandler: null,
+ values: new { area = "Identity", userId = userId, code = code, returnUrl = returnUrl },
+ protocol: Request.Scheme);
+
+ await _emailSender.SendEmailAsync(Input.Email, "Confirm your email",
+ $"Please confirm your account by clicking here.");
+
+ if (_userManager.Options.SignIn.RequireConfirmedAccount)
+ {
+ return RedirectToPage("RegisterConfirmation", new { email = Input.Email, returnUrl = returnUrl });
+ }
+ else
+ {
+ await _signInManager.SignInAsync(user, isPersistent: false);
+ return LocalRedirect(returnUrl);
+ }
+ }
+ foreach (var error in result.Errors)
+ {
+ ModelState.AddModelError(string.Empty, error.Description);
+ }
+ }
+
+ // If we got this far, something failed, redisplay form
+ return Page();
+ }
+
+ private TUser CreateUser()
+ {
+ try
+ {
+ return Activator.CreateInstance();
+ }
+ catch
+ {
+ throw new InvalidOperationException($"Can't create an instance of '{nameof(TUser)}'. " +
+ $"Ensure that '{nameof(TUser)}' is not an abstract class and has a parameterless constructor, or alternatively " +
+ $"override the register page in /Areas/Identity/Pages/Account/Register.cshtml");
+ }
+ }
+
+ private IUserEmailStore GetEmailStore()
+ {
+ if (!_userManager.SupportsUserEmail)
+ {
+ throw new NotSupportedException("The default UI requires a user store with email support.");
+ }
+ return (IUserEmailStore)_userStore;
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/RegisterConfirmation.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/RegisterConfirmation.cshtml
new file mode 100644
index 000000000000..d3e7f61e1bb9
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/RegisterConfirmation.cshtml
@@ -0,0 +1,23 @@
+@page
+@model RegisterConfirmationModel
+@{
+ ViewData["Title"] = "Register confirmation";
+}
+
+
@ViewData["Title"]
+@{
+ if (@Model.DisplayConfirmAccountLink)
+ {
+
+ This app does not currently have a real email sender registered, see these docs for how to configure a real email sender.
+ Normally this would be emailed: Click here to confirm your account
+
+ }
+ else
+ {
+
+ Please check your email to confirm your account.
+
+ }
+}
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/RegisterConfirmation.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/RegisterConfirmation.cshtml.cs
new file mode 100644
index 000000000000..3b9c09d8caeb
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/RegisterConfirmation.cshtml.cs
@@ -0,0 +1,92 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Text;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(RegisterConfirmationModel<>))]
+ public class RegisterConfirmationModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string Email { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool DisplayConfirmAccountLink { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string EmailConfirmationUrl { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnGetAsync(string email, string returnUrl = null) => throw new NotImplementedException();
+ }
+
+ internal class RegisterConfirmationModel : RegisterConfirmationModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly IEmailSender _sender;
+
+ public RegisterConfirmationModel(UserManager userManager, IEmailSender sender)
+ {
+ _userManager = userManager;
+ _sender = sender;
+ }
+
+ public override async Task OnGetAsync(string email, string returnUrl = null)
+ {
+ if (email == null)
+ {
+ return RedirectToPage("/Index");
+ }
+ returnUrl = returnUrl ?? Url.Content("~/");
+
+ var user = await _userManager.FindByEmailAsync(email);
+ if (user == null)
+ {
+ return NotFound($"Unable to load user with email '{email}'.");
+ }
+
+ Email = email;
+ // If the email sender is a no-op, display the confirm link in the page
+ DisplayConfirmAccountLink = _sender is EmailSender;
+ if (DisplayConfirmAccountLink)
+ {
+ var userId = await _userManager.GetUserIdAsync(user);
+ var code = await _userManager.GenerateEmailConfirmationTokenAsync(user);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ EmailConfirmationUrl = Url.Page(
+ "/Account/ConfirmEmail",
+ pageHandler: null,
+ values: new { area = "Identity", userId = userId, code = code, returnUrl = returnUrl },
+ protocol: Request.Scheme);
+ }
+
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResendEmailConfirmation.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResendEmailConfirmation.cshtml
new file mode 100644
index 000000000000..0e49dfa41864
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResendEmailConfirmation.cshtml
@@ -0,0 +1,26 @@
+@page
+@model ResendEmailConfirmationModel
+@{
+ ViewData["Title"] = "Resend email confirmation";
+}
+
+
@ViewData["Title"]
+
Enter your email.
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResendEmailConfirmation.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResendEmailConfirmation.cshtml.cs
new file mode 100644
index 000000000000..a4a9ea66179d
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResendEmailConfirmation.cshtml.cs
@@ -0,0 +1,106 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Text;
+using System.Text.Encodings.Web;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity.UI.Services;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(ResendEmailConfirmationModel<>))]
+ public class ResendEmailConfirmationModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ public string Email { get; set; }
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual void OnGet() => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class ResendEmailConfirmationModel : ResendEmailConfirmationModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+ private readonly IEmailSender _emailSender;
+
+ public ResendEmailConfirmationModel(UserManager userManager, IEmailSender emailSender)
+ {
+ _userManager = userManager;
+ _emailSender = emailSender;
+ }
+
+ public override void OnGet()
+ {
+ }
+
+ public override async Task OnPostAsync()
+ {
+ if (!ModelState.IsValid)
+ {
+ return Page();
+ }
+
+ var user = await _userManager.FindByEmailAsync(Input.Email);
+ if (user == null)
+ {
+ ModelState.AddModelError(string.Empty, "Verification email sent. Please check your email.");
+ return Page();
+ }
+
+ var userId = await _userManager.GetUserIdAsync(user);
+ var code = await _userManager.GenerateEmailConfirmationTokenAsync(user);
+ code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
+ var callbackUrl = Url.Page(
+ "/Account/ConfirmEmail",
+ pageHandler: null,
+ values: new { userId = userId, code = code },
+ protocol: Request.Scheme);
+ await _emailSender.SendEmailAsync(
+ Input.Email,
+ "Confirm your email",
+ $"Please confirm your account by clicking here.");
+
+ ModelState.AddModelError(string.Empty, "Verification email sent. Please check your email.");
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPassword.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPassword.cshtml
new file mode 100644
index 000000000000..a19cceb1d9f4
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPassword.cshtml
@@ -0,0 +1,37 @@
+@page
+@model ResetPasswordModel
+@{
+ ViewData["Title"] = "Reset password";
+}
+
+
@ViewData["Title"]
+
Reset your password.
+
+
+
+
+
+
+
+@section Scripts {
+
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPassword.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPassword.cshtml.cs
new file mode 100644
index 000000000000..ab79a4a653f8
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPassword.cshtml.cs
@@ -0,0 +1,136 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.ComponentModel.DataAnnotations;
+using System.Text;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [IdentityDefaultUI(typeof(ResetPasswordModel<>))]
+ public abstract class ResetPasswordModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [BindProperty]
+ public InputModel Input { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public class InputModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [EmailAddress]
+ public string Email { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ [StringLength(100, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
+ [DataType(DataType.Password)]
+ public string Password { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [DataType(DataType.Password)]
+ [Display(Name = "Confirm password")]
+ [Compare("Password", ErrorMessage = "The password and confirmation password do not match.")]
+ public string ConfirmPassword { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [Required]
+ public string Code { get; set; }
+
+ }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual IActionResult OnGet(string code = null) => throw new NotImplementedException();
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public virtual Task OnPostAsync() => throw new NotImplementedException();
+ }
+
+ internal class ResetPasswordModel : ResetPasswordModel where TUser : class
+ {
+ private readonly UserManager _userManager;
+
+ public ResetPasswordModel(UserManager userManager)
+ {
+ _userManager = userManager;
+ }
+
+ public override IActionResult OnGet(string code = null)
+ {
+ if (code == null)
+ {
+ return BadRequest("A code must be supplied for password reset.");
+ }
+ else
+ {
+ Input = new InputModel
+ {
+ Code = Encoding.UTF8.GetString(WebEncoders.Base64UrlDecode(code))
+ };
+ return Page();
+ }
+ }
+
+ public override async Task OnPostAsync()
+ {
+ if (!ModelState.IsValid)
+ {
+ return Page();
+ }
+
+ var user = await _userManager.FindByEmailAsync(Input.Email);
+ if (user == null)
+ {
+ // Don't reveal that the user does not exist
+ return RedirectToPage("./ResetPasswordConfirmation");
+ }
+
+ var result = await _userManager.ResetPasswordAsync(user, Input.Code, Input.Password);
+ if (result.Succeeded)
+ {
+ return RedirectToPage("./ResetPasswordConfirmation");
+ }
+
+ foreach (var error in result.Errors)
+ {
+ ModelState.AddModelError(string.Empty, error.Description);
+ }
+ return Page();
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPasswordConfirmation.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPasswordConfirmation.cshtml
new file mode 100644
index 000000000000..c52552f3e6d5
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPasswordConfirmation.cshtml
@@ -0,0 +1,10 @@
+@page
+@model ResetPasswordConfirmationModel
+@{
+ ViewData["Title"] = "Reset password confirmation";
+}
+
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPasswordConfirmation.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPasswordConfirmation.cshtml.cs
new file mode 100644
index 000000000000..96ba9e985e9b
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/ResetPasswordConfirmation.cshtml.cs
@@ -0,0 +1,24 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Account.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ public class ResetPasswordConfirmationModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public void OnGet()
+ {
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/_StatusMessage.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/_StatusMessage.cshtml
new file mode 100644
index 000000000000..c830fe5a22f3
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Account/_StatusMessage.cshtml
@@ -0,0 +1,10 @@
+@model string
+
+@if (!String.IsNullOrEmpty(Model))
+{
+ var statusMessageClass = Model.StartsWith("Error") ? "danger" : "success";
+
+ Swapping to Development environment will display more detailed information about the error that occurred.
+
+
+ Development environment should not be enabled in deployed applications, as it can result in sensitive information from exceptions being displayed to end users. For local debugging, development environment can be enabled by setting the ASPNETCORE_ENVIRONMENT environment variable to Development, and restarting the application.
+
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/Error.cshtml.cs b/src/Identity/UI/src/Areas/Identity/Pages/V5/Error.cshtml.cs
new file mode 100644
index 000000000000..283b2dcdb977
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/Error.cshtml.cs
@@ -0,0 +1,40 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System.Diagnostics;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.RazorPages;
+
+namespace Microsoft.AspNetCore.Identity.UI.V5.Pages.Internal
+{
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ [AllowAnonymous]
+ [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
+ public class ErrorModel : PageModel
+ {
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public string RequestId { get; set; }
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
+
+ ///
+ /// This API supports the ASP.NET Core Identity default UI infrastructure and is not intended to be used
+ /// directly from your code. This API may change or be removed in future releases.
+ ///
+ public void OnGet()
+ {
+ RequestId = Activity.Current?.Id ?? HttpContext.TraceIdentifier;
+ }
+ }
+}
diff --git a/src/Identity/UI/src/Areas/Identity/Pages/V5/_Layout.cshtml b/src/Identity/UI/src/Areas/Identity/Pages/V5/_Layout.cshtml
new file mode 100644
index 000000000000..b18e5bb61984
--- /dev/null
+++ b/src/Identity/UI/src/Areas/Identity/Pages/V5/_Layout.cshtml
@@ -0,0 +1,95 @@
+@using Microsoft.AspNetCore.Hosting
+@using Microsoft.AspNetCore.Mvc.ViewEngines
+@inject IWebHostEnvironment Environment
+@inject ICompositeViewEngine Engine
+
+
+
+
+
+ @ViewData["Title"] - @Environment.ApplicationName
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+