如何在ASP.NET MVC中阻止用户以同一账号登录

public class ApplicationUserManager : UserManager<ApplicationUser>
{
    public ApplicationUserManager(IUserStore<ApplicationUser> store)
        : base(store)
    {
    }

    public static ApplicationUserManager Create(IdentityFactoryOptions<ApplicationUserManager> options, IOwinContext context)
    {
        var manager = new ApplicationUserManager(new UserStore<ApplicationUser>(context.Get<ApplicationDbContext>()));
        
        // 配置账号的登录限制
        manager.UserLockoutEnabledByDefault = true; // 启用账号锁定
        manager.DefaultAccountLockoutTimeSpan = TimeSpan.FromMinutes(5); // 账号锁定时间
        manager.MaxFailedAccessAttemptsBeforeLockout = 3; // 登录失败次数达到多少次后锁定账号

        return manager;
    }
}

[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public async Task<ActionResult> Login(LoginViewModel model, string returnUrl)
{
    if (!ModelState.IsValid)
    {
        return View(model);
    }

    var result = await SignInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, shouldLockout: true);
    
    switch (result)
    {
        case SignInStatus.Success:
            return RedirectToLocal(returnUrl);
        case SignInStatus.LockedOut:
            ModelState.AddModelError("", "账号已被锁定，请稍后再试。");
            return View(model);
        case SignInStatus.Failure:
        default:
            ModelState.AddModelError("", "无效的登录尝试。");
            return View(model);
    }
}