Password reset for mail is case sensitive

resetting the password for Leo@Example.com doesn't work if the server has leo@example.com stored.

I added some toLower. login had it already but create not, so it is possible that some people never can login due to having registered with capital letters?

A quick check yielded now candidates for locked out users:

function f(d) {
  if(d.linkedAccounts != null ) {
    for( i=0; i<d.linkedAccounts.length; i++) {
      la = d.linkedAccounts[i];
      if(la.providerKey == "mail" && la.providerUserId != la.providerUserId.toLowerCase()) {
        print(la.providerUserId);
      }
    }
  }
}

db.users.find().forEach(f);

Status

Issue is closed for Release alpha 0.

Comments

Post a comment



optional
optional