tutorial-dotnet-JWTProtectedAPI

AccountController.cs

        //Rest of the SignUp() and GenerateJWTToken() methods
        
        [HttpPost]
        [Route("sign-in")]
        public async Task<ActionResult> SignIn(SignInData signInData)
        {

            try
            {
                //Todo add your business validation here
                //! You may want to edit catched exceptions block to handle failed scenarios
                IdentityUser user = await ValidateUserCredentials(signInData);
                if (user == null)
                {
                    return BadRequest(new
                    {
                        Message = "Invalid Credentials or User Doesn't not exist"
                    });
                }
                string JWTToken = GenerateJWTToken(user);
                return Ok(new
                {
                    Token = JWTToken
                });
            }
            catch (System.Exception error)
            {
                return BadRequest(new
                {
                    message = error.Message
                });
            }
        }

private async Task<IdentityUser> ValidateUserCredentials(SignInData signInData)
        {
            IdentityUser user = await _userManager.FindByEmailAsync(signInData.Email);
            if (user != null)
            {
                var result = _userManager.PasswordHasher.VerifyHashedPassword(user, user.PasswordHash, signInData.Password);
                return result == PasswordVerificationResult.Failed ? null : user;
            }
            return null;
        }