SignInManager Checks IdentityOptions in AccountController Login

[alihdev]

Hi,
we need to use settings to set "IdentitySettingNames.SignIn.RequireConfirmedEmail" to true.
these are our settings:

context.Add(new SettingDefinition(
    name: IdentitySettingNames.SignIn.RequireConfirmedEmail,
    defaultValue: true.ToString(),
    isVisibleToClients: true
));

If the user tries to login and the email is not confirmed, the result should be failed.

• Everything is good in the admin (/Account/Login) view. If the user is not confirmed, give me the message "You are not allowed to login! Your account is inactive or needs to confirm your email/phone number."
  

• The issue is in Swagger (/api/account/login) endpoint. If the user is not confirmed, the login succeeds!
  

What we found is that the issue lies in the AccountController.Login where the SignInManager does not read the IdentityOptions. we should add code to read the IdentityOptions in SignInManager:

await IdentityOptions.SetAsync();

Please check the pull request to see if there is an issue or if we need to follow a step to bypass this issue.

[CLAassistant]

All committers have signed the CLA.

[maliming]

Thanks @alihdev