2

I am using MVC 5 with OWIN identity authentication.

I have not touched the default auth code. (VS 2013).

Sometimes I get "error: Invalid token" when UserManager.ConfirmEmailAsync() is called.

I want to know if it's the case were a user clicked the confirm link in his inbox too late.

How can I get a more detailed exception telling me if the token has expired ? (or check it myself somehow)

Yaron Levi
  • 12,535
  • 16
  • 69
  • 118

1 Answers1

0

The verification of the tokens is baked into the providers and is opaque generally, for the default provider it can fail typically in one of two ways: its expired (1 day default expiry), or the security stamp for the user changed (via password change, removing logins, etc)

Hao Kung
  • 28,040
  • 6
  • 84
  • 93