From 330aa0149ee40d18a027950c4e02d78d76916464 Mon Sep 17 00:00:00 2001
From: Doug Mason <dmason@unitedfiregroup.com>
Date: Wed, 27 Jun 2018 12:44:58 -0500
Subject: [PATCH] Default expected stamp to empty string when null.

---
 .../DataProtectorTokenProvider.cs                               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Microsoft.AspNet.Identity.Owin/DataProtectorTokenProvider.cs b/src/Microsoft.AspNet.Identity.Owin/DataProtectorTokenProvider.cs
index 0d84e81..4862053 100644
--- a/src/Microsoft.AspNet.Identity.Owin/DataProtectorTokenProvider.cs
+++ b/src/Microsoft.AspNet.Identity.Owin/DataProtectorTokenProvider.cs
@@ -126,7 +126,7 @@ public async Task<bool> ValidateAsync(string purpose, string token, UserManager<
 
                     if (manager.SupportsUserSecurityStamp)
                     {
-                        var expectedStamp = await manager.GetSecurityStampAsync(user.Id).WithCurrentCulture();
+                        var expectedStamp = await manager.GetSecurityStampAsync(user.Id).WithCurrentCulture() ?? string.Empty;
                         return stamp == expectedStamp;
                     }
                     return stamp == "";