search

brockallen / BrockAllen.MembershipReboot

MembershipReboot is a user identity management and authentication library.
Other
742 stars 239 forks source link

SingleTenantOwinSample - Possible bug #542

Closed dealproc closed 8 years ago

dealproc commented 9 years ago

Is this correct: https://github.com/brockallen/BrockAllen.MembershipReboot/blob/master/samples/SingleTenantOwinSystemWeb/SingleTenantOwinSystemWeb/Areas/UserAccount/Controllers/RegisterController.cs#L44

It seems as if, based on the way the controller works, that the user would need to be logged in to trigger the verification the way that it's setup.

DavidChristiansen commented 9 years ago

The controller is dressed with the [AllowAnonymous] attribute, which means that all methods will not require an authenticated context does it not?

brockallen commented 9 years ago

@DavidChristiansen right -- the allow anon on the controller will let in anon users.

dealproc commented 9 years ago

What i was getting at was (I should have grabbed line 51 instead) if you run that postback, you're not going to have an identifier going into the validation method, and it's going to fail.

brockallen commented 8 years ago

Ok, cleaning up old issues. I don't know what verifier, but this was working.