问题 I am implementing Forgot Password scenario in an asp .net core 2.x application. I followed the default behavior Click forgot password link from login Enter email Send an email with a link /ResetPassword?code=[Some encoded string] ...etc Click the link and opens the Reset Password screen with an email, new password and confirm password. All the above is Ok, and if the user attemps to click the link in step 3, the system will deny the request saying, Invalid Token! I need to implement more