Return Failed Verification instead of throwing a exception?

[Leonardo-Ferreira]

why don't we create a new value for PasswordVerificationResult like CouldNotExecute or MissingParameters or even UserCannotBeNull instead of throwing a new exception?

[bergmania]

I'm not sure I understand your request, but the method do not work if you have a null user. Further more PasswordVerificationResult is a enum from AspNetCore.Identity and the method overrides one of their methods, so we should definitely stick to their contract.