Ticket S33481
Visible to All Users

Security.Authentication - provide a "Forgot Password" feature

created 15 years ago

See Also:
Security - provide the "Register" and "Forgot Password" actions and pages
Proposed Solution:
Add an option to add Auto-Register Form and Forgot Password Form in XAF Web apps.

Answers

created 13 years ago (modified 8 years ago)

Hi,
I want to close this ticket for now, as we will unlikely implement this in the near future as this is a low priority for us because of the following reasons:

  1. It is already possible to accomplish this task using the current framework capabilities;
  2. It is difficult to provide a generic solution for this task that meets everyone's needs, as there are many people who implemented custom security classes tailored to their own needs and business processes;
    We provide two examples that show how to approach this task in an XAF ASP.NET WebForms app:
        How to: Use Google, Facebook and Microsoft accounts in ASP.NET XAF applications (OAuth2 authentication demo)
        How to manage users (register a new user, restore a password, etc.) from the logon form in ASP.NET.
    We recommend the first example over the second one as authentication providers like Office 365 or G Suite already have the "forgot password" and related features built-in (learn more: onetwo) and you will just need to link them to your XAF app.

I hope you find this information helpful.

    Show previous comments (3)
    Anatol (DevExpress) 7 years ago

      Although the How to manage users (register a new user, restore a password, etc.) from the logon form in ASP.NET example was marked as obsolete, the approaches demonstrated in it can be used in the current version as well. The Reset Password functionality can be implemented fairly easy. It is sufficient to implement the following steps:

      1. Add an action to the logon form - see How to add a custom action on the logon windowActivate a Controller for the Logon Form.
        2. Show a custom dialog when this action is executed - see Ways to Show a ViewNon-Persistent Objects.

      I have attached a modified version of the e4037 example. I have replaced outdated classes and removed the user creation functionality. Note that this example contains some legacy code which is not required for the Reset Password button.

        Hi

        Is there a way to have 'forgot password' feature in blazor too?

        Thanks

        Regards

        Andrey K (DevExpress Support) 4 years ago

          Hello,

          We don't have the built-in 'forgot password' feature in our Security System, but we have the following example that illustrates how to create this functionality using custom actions: E4037 - How to manage users (register a new user, restore a password, etc.) from the logon form in ASP.NET. We haven't tested this solution with Blazor yet, we designed it as platform-independent, and it should work with Blazor as well. Try converting this solution in .NET Core and then integrate it.

          Please let us know if this solution addresses your requirements. Alternatively, use a simpler way that Anatol described above. It is not so generic as the example's code, but it's much easier to implement.

          Thanks,
          Andrey

          Disclaimer: The information provided on DevExpress.com and affiliated web properties (including the DevExpress Support Center) is provided "as is" without warranty of any kind. Developer Express Inc disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. Please refer to the DevExpress.com Website Terms of Use for more information in this regard.

          Confidential Information: Developer Express Inc does not wish to receive, will not act to procure, nor will it solicit, confidential or proprietary materials and information from you through the DevExpress Support Center or its web properties. Any and all materials or information divulged during chats, email communications, online discussions, Support Center tickets, or made available to Developer Express Inc in any manner will be deemed NOT to be confidential by Developer Express Inc. Please refer to the DevExpress.com Website Terms of Use for more information in this regard.