Web API Login using phone number or email id.

Question

Hi,

I ant to login using email or phone number. I changed that but I got errors in ASPNetUsers Email, phonenumber and PasswordHash does not contain in definition of Email,Phonenumber and PasswordHash.Here is my code.

{
           Entities dbObj = new Entities();

            var identity = new ClaimsIdentity(context.Options.AuthenticationType);
            string Email = context.OwinContext.Get<string>("Email");
            string PhoneNumber = context.OwinContext.Get<string>("PhoneNumber");
            var userManager = context.OwinContext.GetUserManager<ApplicationUserManager>();
            if (Email != null)
            {
                var user = dbObj.AspNetUsers.Where(x => x.Email == Email).SingleOrDefault(); //Got the error here
                if (user != null)
                {
                    var psd = user.PasswordHash;
                    PasswordVerificationResult passresult = userManager.PasswordHasher.VerifyHashedPassword(user.PasswordHash, context.Password);

                    if (dbObj.AspNetUsers.Any(x => x.PasswordHash == psd) && passresult.ToString() == "Success") //here
                    {

                        identity.AddClaim(new Claim(ClaimTypes.Role, "admin"));
                        identity.AddClaim(new Claim("username", "admin"));
                        identity.AddClaim(new Claim(ClaimTypes.Name, "Hi Admin"));
                        context.Validated(identity);
                    }
                }
                else
                {
                    context.SetError("invalid_grant", "Email and password is incorrect");
                    return;
                }

            }
            else if (PhoneNumber != null)
            {
                var user = dbObj.AspNetUsers.Where(y => y.PhoneNumber == PhoneNumber).FirstOrDefault(); //and here
                if (user != null)
                {
                    var psd = user.PasswordHash;
                    PasswordVerificationResult passresult = userManager.PasswordHasher.VerifyHashedPassword(user.PasswordHash, context.Password);

                    if (dbObj.AspNetUsers.Any(x => x.PasswordHash == psd) && passresult.ToString() == "Success")
                    {
                        identity.AddClaim(new Claim(ClaimTypes.Role, "user"));
                        identity.AddClaim(new Claim("username", "user"));
                        identity.AddClaim(new Claim(ClaimTypes.Name, "Hi User"));
                        context.Validated(identity);
                    }

Thanks in Advance.

Sachin Singh · Answer

first, you need to understand one thing, OWIN and Identity are two separate things, you can use identity without owin and Owin without asp.net identity, however the default is asp.net identity uses owin for cookie-based authentication because social login is very popular so the two packages Microsoft.AspNet.Identity.EntityFramework and Microsoft.AspNet.Identity.Owin is always used together. first explain which type of approach have you taken, for example, if you create an app with an individual signing option then you get everything and you don't need to code a single line. in order to generate the membership table in your own database, you just need to change the connection string pointing to your database and that's it. but if you had an existing project then which flow you selected becomes important, cause everything is about the configuration of owin and identity correctly otherwise things will be messed up.

vijayaasri palaniappan · Answer

Hi @sachin singh, Its works. Thank you