Password Reset

Goal

This snapshot advances Rivergate Market by teaching you to issue expiring one-use password reset tokens.

Every numbered folder is a complete app. Run this stage independently, then compare it with the previous folder.

Prerequisites

Use .NET 8 SDK and Docker for Postgres stages.

Port 5082 must be free. Copy .env.example before database stages.

• .NET 8 SDK
• A code editor and terminal
• Docker from part 4 onward

Concepts

Store hashed tokens and clear them after a successful reset.

Razor Pages keep handlers close to markup; cookie auth owns the session; EF Core persists catalog and orders.

Walkthrough

Wire forgot/reset forms; use a log mailer locally.

Read the example, then open the matching snapshot. The repository includes validation, CSRF, and the surrounding structure.

// write reset link to console / log mailer

Run and verify

Enter 11-Password-Reset, copy .env.example, restore, migrate, and dotnet run on port 5082.

Open http://127.0.0.1:5082. From data lessons onward, Ada and Grace use password123.

docker compose up -d
git clone https://github.com/michaeldunga1/fcc-aspnet-ecommerce.git
cd fcc-aspnet-ecommerce/11-Password-Reset
cp .env.example .env
dotnet restore
dotnet ef database update
dotnet run --urls http://0.0.0.0:5082

Troubleshooting

Always show a generic success message whether or not the email exists.

For database failures, confirm Docker and the river_NN name. Never commit .env, bin/, obj/, or secrets.

• Read the first exception first
• Rebuild assets after Tailwind class changes
• Never commit secrets

Try this

Request a reset for Ada, complete it once, then confirm the token cannot be reused.

Test a happy path and one invalid or unauthorized request.

• Make one small change
• Test it in the browser
• Compare with the next snapshot only after it works