Use bogus phone tokens for failure message check to avoid collisions (#21853)

Author: HaoK

src/Identity/Specification.Tests/src/UserManagerSpecificationTests.cs

@@ -1486,8 +1486,8 @@ public async Task CanVerifyPhoneNumber()
             Assert.NotEqual(token1, token2);
             Assert.True(await manager.VerifyChangePhoneNumberTokenAsync(user, token1, num1));
             Assert.True(await manager.VerifyChangePhoneNumberTokenAsync(user, token2, num2));
-            Assert.False(await manager.VerifyChangePhoneNumberTokenAsync(user, token2, num1));
-            Assert.False(await manager.VerifyChangePhoneNumberTokenAsync(user, token1, num2));
+            Assert.False(await manager.VerifyChangePhoneNumberTokenAsync(user, "bogus", num1));
+            Assert.False(await manager.VerifyChangePhoneNumberTokenAsync(user, "bogus", num2));
             IdentityResultAssert.VerifyLogMessage(manager.Logger, $"VerifyUserTokenAsync() failed with purpose: ChangePhoneNumber:{num1} for user {await manager.GetUserIdAsync(user)}.");
             IdentityResultAssert.VerifyLogMessage(manager.Logger, $"VerifyUserTokenAsync() failed with purpose: ChangePhoneNumber:{num2} for user {await manager.GetUserIdAsync(user)}.");
         }