ASP.NET Core 3 - Identity - Ep.2.1 Email Verification

[@WarrenGarabrandt]

I'm learning web development after 20 years of only desktop development. Web development has always been intimidating for me because there is just SO much to learn, and the technology keeps changing constantly. I have tried several times to get into web development, but every time I do, I bail out because I never know where to start. Everything seems to depend on you knowing everything else. I'm making another push, and this time I'm going to ASP.NET core 3.1, and one of the things I was having a hard time understanding was middleware authentication and authorization. Your videos have been extremely helpful to me, and wanted to thank you for all the hard work you put into making them, and organizing the concepts so that they are possible to grasp without needing to figure out 50 other things at the same time.

[@RawCoding]

Thank you, and glad I could help

[@ricardothomas3779]

Yeeaaaaaay : ) : ) : ) Hello Anton. Thank you very much for taking the time to do this video for your audience. We all appreciate the work that you are doing. As I have stated in comment on a previous video, you know how to break down the material in such a way for your audience can understand and then having the confidence to implement it. Along with your passion and drive for Software Design and Development/Computer Science, your are gifted to teach. Keep up the great work man. Thank you very much Anton. Blessings.

[@RawCoding]

Cheers, I'll bring out the video on two factor as well at some point.

[@ricardothomas3779]

@@RawCoding Awesome. We would all appreciate that man. 👍🏾👐

[@LinuxUser822]

Just a third video from the list and I'm already sure that I'll learn and understand from it better and quicker than from any other resources. Thank a lot for your effort, I wish you all the best!

[@RawCoding]

Thank you, hope you learn a lot ;)

[@drspyqwerty]

Brilliant series. So much Info. Stick with it, absolutely worth it. strongly recommend to watch the whole series

[@RawCoding]

Thanks for the feedback, glad you liked it!

[@milosh996]

MailKit! What a great package for sending emails. I'm really learning a lot from this series. Thank you for great content, I'm really excited about other videos in the series.

[@RawCoding]

Glad to hear!

[@maryiapuhachova7410]

Before your videos, I didn't know much about it, but you tell it very simply and accessible! Cool! I like your whole video course! Awesome!

[@RawCoding]

Thank you for watching)

[@juancarloshb5]

Excelent content! Thanks! Just added email verification to my Api and worked perfect!

[@RawCoding]

Awesome!

[@ohurcool07]

I pay for pluralsight every month and you have better content than they do. I appreciate all your hard work and easy explanation for everything. Please continue making content and I will continue recommending to everyone I know.

[@RawCoding]

Thank you:)

[@johannesstenling9931]

Thanks for this! Really helped me out when I was doing this for a customer.

[@RawCoding]

Glad I could help

[@iudom]

Thank you for this videos. Very clearly explained and easy to follow. Much appreciated

[@RawCoding]

Cheers:)

[@salarkazazi7584]

Wow thank you so muchhhhh, u r a 0&1 digital Angel to the rescue.

[@RawCoding]

Lol

[@WikkiOnIlluminati]

Much much appreciated Thank Anton

[@RawCoding]

Thank you for watching

[@azizbekibnhamid642]

Amazing course!

[@BrothyamHuaman]

¡Gracias maestro!

[@RawCoding]

De nada amigo, gracias por mirar el video

[@RawCoding]

o miras, mi espanol no es bien

[@xelaksal6690]

Very nice!

[@RawCoding]

Cheers

[@ricardothomas3779]

Guys please support Anton on Patreon, the Discord Channel and via his affiliate link to host your ASP.NET Core Apps.

[@RawCoding]

Would be appreciated!

[@kradstar]

Something beautiful :) Thank you for this video :)

[@RawCoding]

Happy you enjoyed it!

[@abugsbunny]

Nice. thanks for this. greate tutorial.

[@fabricciotornero6876]

Excelent my friend

[@RawCoding]

Thank you :)

[@usevenyears]

Thanks for the video

[@RawCoding]

Thank you for watching :)

[@haribalachander]

Hey Anton. Great video as always. You did not demonstrate the condition where a user tries to login without confirming the email. Ideally the application should not allow the user to login. But when I followed the steps the application does allow me to login without ConfirmEmailAsync() method call first. In such scenario, How does the application verify if the user is yet to validate their email ? Edit: For those wondering, the solution is to set IdentityOptions.SignIn.RequireConfirmedEmail = true during the AddIdentity() call within the ConfigureServices method of your startup class.

[@RawCoding]

You specify a setting in the startup file when you add identity

[@haribalachander]

@@RawCoding Thanks buddy. I'll look in to that setting.

[@haribalachander]

Found the answer and added it to the original comment.

[@RawCoding]

Thank you

[@ZnSstr]

Hey man, do you have a good book or resources to learn about Identity, Oauth, OWIN, Roles, Policies, Claims, Cookie auth, JWT. I keep looking after some nice reources to read and see some diagrams, but all tutorials are like "lets open visual studio" and I am rolling eyes. I wanna build a project and while I know how to make some code work I really need to understand the meaning behind those interfaces and why they exists. What were your steps to learning all this? I don't have a workflow in my head about security in general, I feel like putting lego pieces together and call the app secure just because it has Identity and jwt, which is bad especially for an interview.

[@RawCoding]

Read the specifications. Sit down open them up and read from start to finish. Same as programming you’ll be bored, you’ll put it off for a couple of weeks etc.. Just force yourself and in the end you’ll understand what OAuth & OIDC are and how JWT plays in to it.

[@ZnSstr]

@@RawCoding you hit home with "put if off for a couple of weeks", I feel like most of the documentations are written to scare away people haha.

[@RawCoding]

Don’t want to be mean but someone worked hard to write those docs and it’s a hard thing to get right. I’d say it’s more of a knowledge ingestion format that puts people off - not many people read.

[@ZnSstr]

@@RawCoding Started to read Security in .NET, I am gonna take everything I need in a notepad and then go check with the boys and girls on stackoverflow about whats not clear, I am sure I am not the first asking the questions I want to know. Then I think I have some of your videos on queue, I can't see the tabs anymore because of Microsoft documentation, I opened like 40 tabs. I just don't like implementing blindly some code, I can make it work, I can understand why that code is needed, but something eats me inside I don't know everything.

[@RawCoding]

Some advice - less tabs is better. And feel free to ask questions on the discord server

[@waria_900]

I'm facing a problem, im trying to send to my Gmail account but it threw an exception 😢

[@giampaolotucci5897]

Really nice ! tnx

[@RawCoding]

Ty for watching!

[@orhanaliyev9774]

how after registering a user, did you pass the condition? If configuration is specified, mail verification. Since with this parameter the result will not be successful. I'm just trying to understand, but either you removed this parameter, or I missed something, or who the hell knows how you passed this condition. The only alternative is ! in the condition. Timing is 14:50

[@BenHayat]

Hey Anton, you did all this email backend part and user interaction using MVC. In my project, I'll only be use Web API, IS4 and Vue client. Do you have a video that shows us how to do all these (email verify or password rest, register, login and etc) using Web Api, Vue and IS4? Or is it coming up in IS4 section? Thanks!

[@RawCoding]

Just put this logic in your identity server

[@Uzair_Anwar2299]

💜💜💜💜💜

[@RawCoding]

))

[@ghevisartor6005]

ok dumb question, is there a reason why you only used nameof(VerifyEmail) in that case, but not for the RedirecToAction("Index") methods? i also found on other projects that nameof is not used in those cases but i cant really understand why...Ok maybe because the method name Index() will never change?

[@flauberttagu]

Hello Raw Coding, Nice tutorial by the way. I have an error. Can't find a way to move forward. I get the verifyEmail link correctly but when I click to it, it does not pass through the AccountController (Controller previously made). I can reach the page correctly by clicking to the mail. But the email is not confirm at all.

[@flauberttagu]

Never mind, I just had to put the code inside the page and it works fine. Thank you for this awesome tuto. I will support you as always (end of this month). Hope it will be helpfull 😅 Please, do you have a video on password reset?

[@RawCoding]

Well done, and yes all in these series.

[@eddkepner4227]

Just a suggestion, but maybe you want to check if email confirmations are required before generating a token and sending an email. _userManager.Options.SignIn.RequireConfirmedAccount

[@RawCoding]

It's a possibility!

[@sweetydhore2390]

Genius

[@RawCoding]

Ta

[@thanzeeljalaldeen]

shouldn't it be POST instead of get when verifying an email?

[@ervssevilla4119]

Nice!

[@RawCoding]

Cheers

[@lilasalsyoufi4915]

Great Videos. I followed all the steps, but whenever I hit the Login button nothing happens. what am I doing wrong?

[@RawCoding]

So umm when you press the button it’ll try to redirect you to a route double check that it’s bound and exists or maybe it’s happening so fast you can’t see it, which is a good thing

[@Solmead]

Could you cover 2 factor login as well?

[@RawCoding]

I will once I learn it.

[@dkisov1]

Hello, Anton! I have this exception "no connection could be made because the target machine actively refused it. 127.0.0.1". Can you tell me what can I do about it? P.S. Great video btw!

[@RawCoding]

Have you installed the smtp server?

[@dkisov1]

@@RawCoding No, I haven't... Thank you! :D

[@RawCoding]

No worries

[@michavegte7930]

Can this also be used for wpf applications?

[@RawCoding]

Yes I have a video in the playlist on how to have a basic setup

[@pranavsharma4866]

Hey I am getting an error at "await _ email service.sendasync" as we go through the process, exception handling, I hope you will help me out with this.

[@RawCoding]

What's the error? Have you tried googling the error?

[@pranavsharma4866]

Raw Coding i tried but i cant find any solution for that its just when u go to register it won’t send you the email, and moreover can we send email to any email to any email provider or to just papercut which I don’t understand

[@RawCoding]

What's the error saying?

[@pranavsharma4866]

Raw Coding I’ll post you a secreenshot in few minutes

[@RawCoding]

@@pranavsharma4866 can you not copy paste it?

[@demonbruster926]

ServiceNotAuthenticatedException: 5.7.0 Must issue a STARTTLS command first. 191sm9950642pfz.30 - gsmtp MailKit.Net.Smtp.SmtpClient.ProcessMailFromResponse(MimeMessage message, MailboxAddress mailbox, SmtpResponse response) when i try to use gmail smtp sever i got this error

[@demonbruster926]

if i use smtp port as 465 SmtpProtocolException: The SMTP server has unexpectedly disconnected. MailKit.Net.Smtp.SmtpStream.ReadAheadAsync(bool doAsync, CancellationToken cancellationToken) i got this one

[@RawCoding]

Not sure, haven't worked with the gmail smtp

[@rizwinshaikh4521]

Is there any alternative for papercut ? bcz sometimes it doesn't work.

[@RawCoding]

stackoverflow.com/questions/4177990/local-smtp-server-that-can-be-used-for-testing-and-development-wont-actually

[@_grzehotnik]

9:28 "Let's actually go DHH"

[@RawCoding]

haha

[@mishrajit]

A Greate Work for the shake of whole (Identity Server4) Community. Ok, so to reset the password, one need to use.. ResetPasswordAsync insted of ConfirmEmailAsync, Like this _userManager.ResetPasswordAsync(user, model.Code, model.Password). But I want to know how do I set time limit to verify the email. In the above case I can even verify after many days. Hope you got my point!

[@RawCoding]

Thank you. Never done this, try this article: www.tech-coder.com/2016/06/how-to-change-aspnet-identity-token.html Don't forget to share your findings :)

[@1kidfearless]

Look at that, a video that actually covers how to implement the email service rather than telling people to just call their own functions.

[@RawCoding]

That’s what we do here )

[@nove1398]

Token always fails no matter how many times i generate the token

[@mehmetalibasarr2476]

I haven't find any single documents that work for ASP.NET FRAMEWORK WEB FORM IDENTİTY... no one is using that thing?

[@mehmetalibasarr2476]

I mean i found some microsoft documents. But they are either dead or dying...

[@RawCoding]

Yea, I don't use web forms