saving the Identity token in the Aspnetusertokens table

Question

Hi I created an Asp.net core 6 project and I added the Identity framework for authentication and authorization, I would like to add token management and while doing research I realized that Identity also manages the management of tokens because it generates them at each authentication thanks to the command ".AddDefaultTokenProviders();" in startup.cs but I would like to save these tokens in the database precisely in the Aspnetusertokens table of Identity, so I added a TokenController controller which will help me do it, here is what I have in this controller 

"using Projet.Data;

Answer 1

the tokens expire. you only need the last created.

in general they are intended for one time use. generate the token and save. send email, with token on url. the user must click the link before the token expires. if expired they must ask for new email link. only the lastest email link should work.

this is different from caching access and refresh tokens which you might want if using external oauth server.

Answer 2

using Project.Data;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
using Project.Entities;

namespace Project.Controllers
{
    public class TokenController : Controller
    {
        private readonly UserManager<IdentityUser> _userManager;
        private readonly ARTFContext _context;
        public TokenController(UserManager<IdentityUser> userManager, ARTFContext context)
        {
            _userManager = userManager;
            _context = context;
        }
        [HttpPost]
        public async Task<IActionResult> GeneratePasswordResetToken(string userId)
        {
            var user = await _userManager.FindByIdAsync(userId);

            if (user != null)
            {
                var token = await _userManager.GeneratePasswordResetTokenAsync(user);

                // Enregistrer le token dans la base de données (table AspNetUserTokens)
                var userToken = new IdentityUserToken<string>
                {
                    UserId = user.Id,
                    LoginProvider = "Default",
                    Name = "PasswordResetToken",
                    Value = token
                };

                _context.UserTokens.Add(userToken);
                await _context.SaveChangesAsync();

                // Vous pouvez également envoyer le token par e-mail si nécessaire

                return Ok("Token de réinitialisation de mot de passe généré et enregistré avec succès");
            }
            return NotFound(); // Gérer le cas où l'utilisateur n'existe pas
        }

        [HttpPost]
        public async Task<IActionResult> GenerateEmailConfirmationToken(string userId)
        {
            var user = await _userManager.FindByIdAsync(userId);

            if (user != null)
            {
                var token = await _userManager.GenerateEmailConfirmationTokenAsync(user);

                // Enregistrer le token dans la base de données (table AspNetUserTokens)
                var userToken = new IdentityUserToken<string>
                {
                    UserId = user.Id,
                    LoginProvider = "Default",
                    Name = "EmailConfirmationToken",
                    Value = token
                };

                _context.UserTokens.Add(userToken);
                await _context.SaveChangesAsync();

                // Vous pouvez également envoyer le token par e-mail si nécessaire

                return Ok("Token de confirmation d'e-mail généré et enregistré avec succès");
            }

            return NotFound(); // Gérer le cas où l'utilisateur n'existe pas
        }
    }
}

Answer 3

but I have no record in the database yet the token is indeed generated because in my browser at the header level I have a token corresponding to my authentication information which is generated, someone can help me understand where the problem is coming from?

THANKS

sorry for presenting my problem to you in several sections like that I did it so that it doesn't seem too long otherwise it's the same question

Answer 4

Example of saving data to the AspNetUserTokens table.

public async Task<IActionResult> Index()
{
    IdentityUser? user = await _userManager.FindByEmailAsync("******@gmail.com");

    if (await _userManager.GetAuthenticationTokenAsync(user, "MyLoginProvider", "MyToken") == null)
    {
        IdentityResult result = await _userManager.SetAuthenticationTokenAsync(user, "MyLoginProvider", "MyToken", "123456ASDFGG");
    }
            
    string? token = await _userManager.GetAuthenticationTokenAsync(user, "MyLoginProvider", "MyToken");


    return Ok(new { token = token });
}