Token endpoint and locked account

Hi I have a problem with token endpoint. I created custom controller action for token endpoint like in readme. I made few changes for account locking system:

                // IF PASSWORD NOT CORRECT
                if (!await _userManager.CheckPasswordAsync(user, request.Password))
                {
                    if (_userManager.SupportsUserLockout)
                    {
                        await _userManager.AccessFailedAsync(user);
                    }
                    var failedAttempts = await _userManager.GetAccessFailedCountAsync(user);
                    var passwordInvalid = new ErrorViewModel()
                    {
                        Error = "Invalid grant",
                        ErrorDescription = String.Format("Password incorrect!  {0} z 5 attempts.", failedAttempts )
                    };
                    return Json(passwordInvalid);
                }

                // IF ACCOUNT LOCKED
                if (!await _userManager.IsLockedOutAsync(user))
                {
                    var lockoutEndTime = await _userManager.GetLockoutEndDateAsync(user);

                    var accountLocked = new ErrorViewModel()
                    {
                        Error = "Invalid grant",
                        ErrorDescription = "Account locked! Wait " + lockoutEndTime.Value.Minute + "minutes."
                    };
                    return Json(accountLocked);
                }

Unless user reach limit of attempts all is fine, but when user account is locked server not hit my action. I’m getting 400 (Bad Request), but it’s not my response:

{
error:"invalid_grant"
error_description:"Account locked out."
}

[kevinchalet]

Okay, I’m sold, let’s remove the internal check. I’ll work on that in the next few days.

[kevinchalet]

Fixed by https://github.com/openiddict/openiddict-core/issues/220.