How to return IHttpActionResult in ApplicationOAuthProvider in Web API - asp.net

Question

I just need to return IHttpActionResult or json in ApplicationOAuthProvider class
I tried the following code but didn't work. i got error "Syntax error".
if impossible to return IHttpActionResult, is there anyway to redirect to IHttpActionResult action method?
Please help me I have been searching for solution for a few days and i can't not find any help. So your help will be so much appreciated
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
var userManager = context.OwinContext.GetUserManager<ApplicationUserManager>();
ApplicationUser user = await userManager.FindAsync(context.UserName, context.Password);
if (!userManager.CheckPassword(user, context.Password))
{
IOwinResponse response = context.Response;
response.StatusCode = 200;
response.ContentType = "text/json";
await response.WriteAsync("{\"Message\":Wrong Password,\"success\":false}");
return;
}
}
Here is my full code
public class ApplicationOAuthProvider : OAuthAuthorizationServerProvider
{
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
var userManager = context.OwinContext.GetUserManager<ApplicationUserManager>();
ApplicationUser user = await userManager.FindAsync(context.UserName, context.Password);
if (!userManager.CheckPassword(user, context.Password))
{
IOwinResponse response = context.Response;
response.StatusCode = 200;
response.ContentType = "text/json";
await response.WriteAsync("{\"Message\":Wrong Password,\"success\":false}");
return;
}
ClaimsIdentity oAuthIdentity = await user.GenerateUserIdentityAsync(userManager,
OAuthDefaults.AuthenticationType);
ClaimsIdentity cookiesIdentity = await user.GenerateUserIdentityAsync(userManager,
CookieAuthenticationDefaults.AuthenticationType);
AuthenticationProperties properties = CreateProperties(user.UserName);
AddUserInfoToProperties(properties, user);
AuthenticationTicket ticket = new AuthenticationTicket(oAuthIdentity, properties);
context.Validated(ticket);
context.Request.Context.Authentication.SignIn(cookiesIdentity);
}
public override Task TokenEndpoint(OAuthTokenEndpointContext context)
{
foreach (KeyValuePair<string, string> property in context.Properties.Dictionary)
{
context.AdditionalResponseParameters.Add(property.Key, property.Value);
}
return Task.FromResult<object>(null);
}
public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
{
// Resource owner password credentials does not provide a client ID.
if (context.ClientId == null)
{
context.Validated();
}
return Task.FromResult<object>(null);
}
public override Task ValidateClientRedirectUri(OAuthValidateClientRedirectUriContext context)
{
if (context.ClientId == _publicClientId)
{
Uri expectedRootUri = new Uri(context.Request.Uri, "/");
if (expectedRootUri.AbsoluteUri == context.RedirectUri)
{
context.Validated();
}
}
return Task.FromResult<object>(null);
}
}
}

Answer 1

Unfortunately you can't. You are using OAuth2Authorization middleware and, the middleware would generate the response itself.
You can use SetError() method, for returning error.
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
var userManager = context.OwinContext.GetUserManager<ApplicationUserManager>();
ApplicationUser user = await userManager.FindAsync(context.UserName, context.Password);
if (!userManager.CheckPassword(user, context.Password))
{
context.SetError("Wrong Password");
return;
}
}