using System; using System.Collections.Generic; using System.ComponentModel.DataAnnotations; using System.Text.Encodings.Web; using System.Text; using System.Threading.Tasks; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Identity; using Microsoft.AspNetCore.Mvc; using Microsoft.AspNetCore.Mvc.RazorPages; using Microsoft.AspNetCore.WebUtilities; using Amazon.AspNetCore.Identity.Cognito; using Amazon.Extensions.CognitoAuthentication; namespace Samples.Areas.Identity.Pages.Account { [AllowAnonymous] public class ForgotPasswordModel : PageModel { private readonly CognitoUserManager _userManager; public ForgotPasswordModel(UserManager userManager) { _userManager = userManager as CognitoUserManager; } [BindProperty] public InputModel Input { get; set; } public class InputModel { [Required] [EmailAddress] public string Email { get; set; } } public async Task OnPostAsync() { if (ModelState.IsValid) { var user = await _userManager.FindByEmailAsync(Input.Email); if (user == null || !(await _userManager.IsEmailConfirmedAsync(user))) { // Don't reveal that the user does not exist or is not confirmed return RedirectToPage("./ResetPassword"); } // Cognito will send notification to user with reset token the user can use to reset their password. await user.ForgotPasswordAsync(); return RedirectToPage("./ResetPassword"); } return Page(); } } }