I use aspnetboilerplate to develop my web application, it is asp.net 5 based and internally use Microsoft Identity system to authenticate and authorize, the columes of user table are as below:
In the web application, whenever creating a new user, set IsActive to true and IsLockoutEnabled to false, however, currently customers report issues when they use the web application, that is sometimes, after serveral access failures, the LockoutEndDateUtc
is set and the customer cannot login any longer.
I also set UserLockoutEnabledByDefaultto false on theUserManager.
But still the LockoutEndDateUtc is updated after several login failure (e.g. incorrect password).
If you have disabled lockout properly and still the user is locked out, my best guess is custom code is setting the lockout. Other than that there is not much we can do as we cannot see your code.
None
0 Points
2 Posts
how to disable lockout feature
Nov 15, 2018 02:03 PM|novodexx|LINK
I use aspnetboilerplate to develop my web application, it is asp.net 5 based and internally use Microsoft Identity system to authenticate and authorize, the columes of user table are as below:
[Id]
,[AuthenticationSource]
,[UserName]
,[TenantId]
,[EmailAddress]
,[Name]
,[Surname]
,[Password]
,[EmailConfirmationCode]
,[PasswordResetCode]
,[LockoutEndDateUtc]
,[AccessFailedCount]
,[IsLockoutEnabled]
,[PhoneNumber]
,[IsPhoneNumberConfirmed]
,[SecurityStamp]
,[IsTwoFactorEnabled]
,[IsEmailConfirmed]
,[IsActive]
,[LastLoginTime]
,[IsDeleted]
,[DeleterUserId]
,[DeletionTime]
,[LastModificationTime]
,[LastModifierUserId]
,[CreationTime]
,[CreatorUserId]
In the web application, whenever creating a new user, set IsActive to true and IsLockoutEnabled to false, however, currently customers report issues when they use the web application, that is sometimes, after serveral access failures, the LockoutEndDateUtc is set and the customer cannot login any longer.
I also set UserLockoutEnabledByDefault to false on the
UserManager.But still the LockoutEndDateUtc is updated after several login failure (e.g. incorrect password).
How to disable lockout completely?
All-Star
38731 Points
15900 Posts
Re: how to disable lockout feature
Nov 15, 2018 02:20 PM|mgebhard|LINK
If you have disabled lockout properly and still the user is locked out, my best guess is custom code is setting the lockout. Other than that there is not much we can do as we cannot see your code.