Account lookout after 5 attempts

Rohan

Hello everyone how to lock out a user account after 5 attempts in .net core. I have set code in a startup.cs but not working.

services.AddIdentity(options =>
{
options.SignIn.RequireConfirmedAccount = true;
options.SignIn.RequireConfirmedEmail = true;
options.Lockout.AllowedForNewUsers = true;
options.Lockout.MaxFailedAccessAttempts = 3;
options.Lockout.DefaultLockoutTimeSpan = TimeSpan.FromMinutes(10);
})

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sachin Singh4y ago
Accepted answer
you need to set the lockout flag to true when you are logging in the user.
var result = await signInManager.PasswordSignInAsync(userName,password, rememberMe, true);
the last parameter is true, so now the user's account will be locked after 3 attempts as set in your startup.
+2
Sachin Singh4y ago
It will also work in wrong email, means either the email or psd is incorrect then account will be locked.
+1
Ketan Mokariya4y ago
Please check if you have passed the parameter for lockout while calling SignInManager.PasswordSignInAsync Method
public virtual System.Threading.Tasks.Task PasswordSignInAsync (string userName, string password, bool isPersistent, bool lockoutOnFailure);
pass parameters for lockoutOnFailure to true and check result for signin for IsLockedOut like below e.g
var result = await signInManager.PasswordSignInAsync(userName,password, rememberMe, true);

if (result.IsLockedOut)
{
  // error message
}
+1