xxxxxxxxxx
just need to do HttpUtility.UrlEncode before sending an email. No HttpUtility.UrlDecode during reset.
var callback = Url.Content($"{this.Request.Scheme}://{this.Request.Host}{this.Request.PathBase}/reset-password?token={HttpUtility.UrlEncode(token)}&email={user.Email}");