Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] lldap website auth's username is case sensitive, while password reset is not #728

Open
evrardjp opened this issue Nov 1, 2023 · 1 comment
Labels
bug Something isn't working

Comments

@evrardjp
Copy link

evrardjp commented Nov 1, 2023

Describe the bug
When logging in, I need to provide a username in a case sensitive manner (makes sense to me).
Yet, if I go to password reset page, I add a capital letter for the login to recover, and it will work.

If this is intentional, it can definitely confuse people "Why does the password reset work, but auth does not?"

To Reproduce
Steps to reproduce the behavior:

  1. Create user in the web interface in lowercase letters
  2. Go for self-service password reset page and enter the same username with an uppercase letter.
  3. Receive password reset email
  4. (Optional) try authenticate with uppercase user.

Expected behavior
Step 3 should not have worked without the correct case.

Logs
If you want logs I can provide some.

Additional context
Is that expected?

@evrardjp evrardjp added the bug Something isn't working label Nov 1, 2023
@lordratner
Copy link
Contributor

When you create a user, it is not case sensitive. If you already have user "johndoe" you will not be able to create "JohnDoe"

I think everything should be case-insensitive (for usernames obviously) and force it to lowercase in the webui. Easier that way.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants