UpdateAddPhoneNumberActionMethod

nexmo-community · Jul 1, 2016 · 7830bd4 · 7830bd4
1 parent f732474
commit 7830bd4
Showing 1 changed file with 19 additions and 9 deletions.
diff --git a/Nexmo2FADemo/Controllers/ManageController.cs b/Nexmo2FADemo/Controllers/ManageController.cs
@@ -109,25 +109,35 @@ public ActionResult AddPhoneNumber()
         //
         // POST: /Manage/AddPhoneNumber
         [HttpPost]
+        [AllowAnonymous]
         [ValidateAntiForgeryToken]
         public async Task<ActionResult> AddPhoneNumber(AddPhoneNumberViewModel model)
         {
             if (!ModelState.IsValid)
             {
                 return View(model);
             }
-            // Generate the token and send it
-            var code = await UserManager.GenerateChangePhoneNumberTokenAsync(User.Identity.GetUserId(), model.Number);
-            if (UserManager.SmsService != null)
+            var db = new ApplicationDbContext();
+            if (db.Users.FirstOrDefault(u => u.PhoneNumber == model.Number) == null)
             {
-                var message = new IdentityMessage
+                // Generate the token and send it
+                var code = await UserManager.GenerateChangePhoneNumberTokenAsync((string)Session["UserID"], model.Number);
+                if (UserManager.SmsService != null)
                 {
-                    Destination = model.Number,
-                    Body = "Your security code is: " + code
-                };
-                await UserManager.SmsService.SendAsync(message);
+                    var message = new IdentityMessage
+                    {
+                        Destination = model.Number,
+                        Body = "Your security code is: " + code
+                    };
+                    await UserManager.SmsService.SendAsync(message);
+                }
+                return RedirectToAction("VerifyPhoneNumber", new { PhoneNumber = model.Number });
+            }
+            else
+            {
+                ModelState.AddModelError("", "The provided phone number is associated with another account.");
+                return View();
             }
-            return RedirectToAction("VerifyPhoneNumber", new { PhoneNumber = model.Number });
         }
 
         //