Register a default token provider to allow admin to rest password. (#…

…16075)

src/OrchardCore.Modules/OrchardCore.Users/Controllers/AuthenticatorAppController.cs

@@ -138,7 +138,7 @@ public async Task<IActionResult> ResetPost()
             return UserNotFound();
         }
 
-        return await RemoveTwoFactorProviderAync(user, async () =>
+        return await RemoveTwoFactorProviderAsync(user, async () =>
         {
             await UserManager.ResetAuthenticatorKeyAsync(user);
 

src/OrchardCore.Modules/OrchardCore.Users/Controllers/TwoFactorAuthenticationBaseController.cs

@@ -73,7 +73,7 @@ protected async Task SetRecoveryCodesAsync(string[] codes, string userId)
             });
     }
 
-    protected async Task<IActionResult> RemoveTwoFactorProviderAync(IUser user, Func<Task> onSuccessAsync)
+    protected async Task<IActionResult> RemoveTwoFactorProviderAsync(IUser user, Func<Task> onSuccessAsync)
     {
         var currentProviders = await GetTwoFactorProvidersAsync(user);
 

src/OrchardCore.Modules/OrchardCore.Users/Startup.cs

@@ -119,9 +119,10 @@ public override void ConfigureServices(IServiceCollection services)
             // Add ILookupNormalizer as Singleton because it is needed by UserIndexProvider
             services.TryAddSingleton<ILookupNormalizer, UpperInvariantLookupNormalizer>();
 
-            // Add the default token providers used to generate tokens for reset passwords, change email,
-            // and for two-factor authentication token generation.
-            services.AddIdentity<IUser, IRole>();
+            // Add the default token providers used to generate tokens for an admin to change user's password.
+            services.AddIdentity<IUser, IRole>()
+                .AddTokenProvider<DataProtectorTokenProvider<IUser>>(TokenOptions.DefaultProvider);
+
             services.AddTransient<IConfigureOptions<IdentityOptions>, IdentityOptionsConfigurations>();
             services.AddPhoneFormatValidator();
             // Configure the authentication options to use the application cookie scheme as the default sign-out handler.