I want to login with email and phone number oauth

selvi jp

5y771.NET

I want to login with email or phone number in oauth

email is default here ,but i want to compare email and phone number from Database

public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
var identity = new ClaimsIdentity(context.Options.AuthenticationType);
string Email = context.OwinContext.Get<string>("Email");
if (Email == "[email protected]" && context.Password == "admin")
{
identity.AddClaim(new Claim(ClaimTypes.Role, "admin"));
identity.AddClaim(new Claim("username", "admin"));
identity.AddClaim(new Claim(ClaimTypes.Name, "Hi Admin"));
context.Validated(identity);
}
else if (context.UserName == "user" && context.Password == "user")
{
identity.AddClaim(new Claim(ClaimTypes.Role, "user"));
identity.AddClaim(new Claim("username", "user"));
identity.AddClaim(new Claim(ClaimTypes.Name, "Hi User"));
context.Validated(identity);
}
else
{
context.SetError("invalid_grant", "Provided username and password is incorrect");
return;
}
}
public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
{
//Here we get the Custom Field sent in /Token
var Email = context.Parameters.Where(x => x.Key == "Email").Select(x => x.Value).FirstOrDefault();
if (Email.Length > 0 && Email[0].Trim().Length > 0)
{
context.OwinContext.Set<string>("Email", Email[0].Trim());
}
// Resource owner password credentials does not provide a client ID.
if (context.ClientId == null)
{
context.Validated();
}
return Task.FromResult<object>(null);
}

5 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sachin Singh5y ago
Accepted answer
check null before comparing
if (Email !=null)
            {
// do email comparison.
                context.OwinContext.Set("Email", Email);
            }
if(Phone!=null)
{
// do phone comparison.
                context.OwinContext.Set<int>("phone", phone);
            }
+3
Sachin Singh5y ago
yes,
before comparing the password, first has the password with the same mechanism, for example if you have used
SympleCrypto then first has the password entered by user with the same salt as present in database then compare.
var user= YourDbContext.Users.Where(x=>x.Email==Email).SingleOrDefault();
var saltInDB=user.Salt;
var psdInDB= user.Password;
var crypto= new SimpleCrypto();
var userEnteredPsdEncrypt= crypto.Compute(UserEnteredPsd,saltInDB);

if(userEnteredPsdEncrypt==psdInDB)
{
// valid user
}
+2
selvi jp5y ago
Email or phonenumber login is done but password checking is not working.if i enter wrong password.then alse login.i can compare table password with login password.but i store password in hashing method so i cant compare with table.can you solve this
+1
selvi jp5y ago
Thank you.your code is working but i want only login with email or phonenumber.ifi login with email Phonenumber is null so null error will display

+1
Sachin Singh5y ago
Just give reference of your DataAccessLayer to the class library where you are putting the OAuth.
If both are in the same project then simply use your data access logic and compare.
for example if you are using Entity Framework then
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
var identity = new ClaimsIdentity(context.Options.AuthenticationType);
string Email = context.OwinContext.Get("Email");
var user= YourDbContext.Users.Where(x=>x.Email==Email).SingleOrDefault();
var psd= user.Password.

if (YourDbContext.Users.Any(x=>x.Password==psd))
            {
                identity.AddClaim(new Claim(ClaimTypes.Role, "admin"));
                identity.AddClaim(new Claim("username", "admin"));
                identity.AddClaim(new Claim(ClaimTypes.Name, "Hi Admin"));
                context.Validated(identity);
            }
}
else if
{
/// do the same for phone
}
+3