Use non-case sensitive string for any keys in persisted grants

[brockallen]

If key is stored in non-case sensitive DB then might be collisions.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[brockallen]

From what I can tell, this is already being done since we use CryptoRandom.CreateUniqueId which in turns uses ByteArrayToString which emits the hex encoded values of the bytes (which of course is not case sensitive).

[brockallen]

Ok, I was wrong... CryptoRandom.CreateUniqueId defaults to base64url encoding. We need to change it everywhere to pass CryptoRandom.CreateUniqueId(format: CryptoRandom.OutputFormat.Hex).

[leastprivilege]

Yes - we also should make sure we use the handle generation service everywhere?

[brockallen]

PR submitted

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.