Adding forgotten password and password reset mechanisms

Now that you have seen how to add authentication to your applications, you have to think about how you want to help users to reset their forgotten passwords. Users will forget their passwords, it will happen, so you need to have some mechanisms in place.

The standard way of handling this type of request is to send an email reset link to the user. The user can then update their password, without the risk of sending the password in clear text through email. Sending a user password directly to a user email is not secure and should be avoided at all costs.

You will now see how to add a reset password feature to the Tic-Tac-Toe application:

  1. Update the Login Form, and add a new link called ...

Get Learning ASP.NET Core 2.0 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.