Lost password recovery

If you find yourself in a situation where you can no longer login as admin, there is a recovery process available. You need to have access to the Binner.Web.exe service executable and administrator/sudo privileges on the machine it is running on.

Procedure

If you set the password in the database to an empty string (not NULL, no whitespace) the system will allow you to login without a password. It's not possible to set this via the UI or api, but you can do it via the service executable.

.\Binner.Web.exe --resetuser --username admin

Outputs: Password for 'admin' was reset successfully. You may now login with a blank password.

The user should then immediately set a new password.

You can also reset it via your database in the Users table which will have the same effect.

Disabling this option

By default this option is enabled in your appsettings.json configuration file. By setting AllowPasswordRecovery = false this option will be disabled and users will receive an invalid password response when trying to login to an account with a blank password set.

"WebHostServiceConfiguration": {
  "AllowPasswordRecovery": false,
}