From 30fdaae36cba140d0b7fe60e580f7875bae56222 Mon Sep 17 00:00:00 2001 From: 01zulfi <85733202+01zulfi@users.noreply.github.com> Date: Sat, 2 May 2026 22:19:26 +0500 Subject: [PATCH] identity: return ok if user not found in recover endpoint (#95) --- Streetwriters.Identity/Controllers/AccountController.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Streetwriters.Identity/Controllers/AccountController.cs b/Streetwriters.Identity/Controllers/AccountController.cs index 07f74c0..95885e3 100644 --- a/Streetwriters.Identity/Controllers/AccountController.cs +++ b/Streetwriters.Identity/Controllers/AccountController.cs @@ -190,8 +190,8 @@ namespace Streetwriters.Identity.Controllers var client = Clients.FindClientById(form.ClientId); if (client == null) return BadRequest("Invalid client_id."); - var user = await UserManager.FindByEmailAsync(form.Email) ?? throw new Exception("User not found."); - if (!await UserService.IsUserValidAsync(UserManager, user, form.ClientId)) return Ok(); + var user = await UserManager.FindByEmailAsync(form.Email); + if (user == null || !await UserService.IsUserValidAsync(UserManager, user, form.ClientId)) return Ok(); var code = await UserManager.GenerateUserTokenAsync(user, TokenOptions.DefaultProvider, "ResetPassword"); var callbackUrl = UrlExtensions.TokenLink(user.Id.ToString(), code, client.Id, TokenType.RESET_PASSWORD);