{"action":"created","issue":{"url":"https://api.github.com/repos/brockallen/BrockAllen.MembershipReboot/issues/516","labels_url":"https://api.github.com/repos/brockallen/BrockAllen.MembershipReboot/issues/516/labels{/name}","comments_url":"https://api.github.com/repos/brockallen/BrockAllen.MembershipReboot/issues/516/comments","events_url":"https://api.github.com/repos/brockallen/BrockAllen.MembershipReboot/issues/516/events","html_url":"https://github.com/brockallen/BrockAllen.MembershipReboot/issues/516","id":68810001,"number":516,"title":"ChangePasswordFromResetKey doesn't clear failedLoginCount","user":{"login":"parkinsona","id":8508456,"avatar_url":"https://avatars.githubusercontent.com/u/8508456?v=3","gravatar_id":"","url":"https://api.github.com/users/parkinsona","html_url":"https://github.com/parkinsona","followers_url":"https://api.github.com/users/parkinsona/followers","following_url":"https://api.github.com/users/parkinsona/following{/other_user}","gists_url":"https://api.github.com/users/parkinsona/gists{/gist_id}","starred_url":"https://api.github.com/users/parkinsona/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parkinsona/subscriptions","organizations_url":"https://api.github.com/users/parkinsona/orgs","repos_url":"https://api.github.com/users/parkinsona/repos","events_url":"https://api.github.com/users/parkinsona/events{/privacy}","received_events_url":"https://api.github.com/users/parkinsona/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-04-15T23:33:30Z","updated_at":"2015-04-20T22:54:52Z","closed_at":"2015-04-20T01:06:37Z","body":"Hi,\r\n\r\nI have had a user who locked themself out recently, and they reset their password. However, they couldn't log in again until their lockout period had expired. \r\n\r\nI call the following to reset the user's password:\r\n``` c#\r\n_userService.ChangePasswordFromResetKey(model.VerificationKey, model.NewPassword)\r\n```\r\n\r\nFrom what I can see, this calls SetPassword(account, newPassword) which does not reset the failed login count. \r\n\r\nI see the API has a SetPassword(accountId) which will reset the failurecount.\r\nIs there a reason why ChangePasswordFromResetKey doesn't reset the failure count? \r\n\r\nAlso, is there a way to tell the user that their account is locked when their login fails. I'm currently using MR in the context of identityserver, and it just tells them the user name password is incorrect. Perhaps this is by design?"},"comment":{"url":"https://api.github.com/repos/brockallen/BrockAllen.MembershipReboot/issues/comments/94587147","html_url":"https://github.com/brockallen/BrockAllen.MembershipReboot/issues/516#issuecomment-94587147","issue_url":"https://api.github.com/repos/brockallen/BrockAllen.MembershipReboot/issues/516","id":94587147,"user":{"login":"parkinsona","id":8508456,"avatar_url":"https://avatars.githubusercontent.com/u/8508456?v=3","gravatar_id":"","url":"https://api.github.com/users/parkinsona","html_url":"https://github.com/parkinsona","followers_url":"https://api.github.com/users/parkinsona/followers","following_url":"https://api.github.com/users/parkinsona/following{/other_user}","gists_url":"https://api.github.com/users/parkinsona/gists{/gist_id}","starred_url":"https://api.github.com/users/parkinsona/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parkinsona/subscriptions","organizations_url":"https://api.github.com/users/parkinsona/orgs","repos_url":"https://api.github.com/users/parkinsona/repos","events_url":"https://api.github.com/users/parkinsona/events{/privacy}","received_events_url":"https://api.github.com/users/parkinsona/received_events","type":"User","site_admin":false},"created_at":"2015-04-20T22:54:52Z","updated_at":"2015-04-20T22:54:52Z","body":"Thanks for this update. It looks good now.\r\nI noticed the following in the releast notes for v8.3: \r\n```\r\noverloaded authN APIs to indicate authentication result (e.g. locked account, failed credentials, etc)\r\n```\r\n\r\nDoes this mean it would be possible to show  an IdentityServer user that their account is locked?"}}