Skip to content
This repository has been archived by the owner on May 15, 2019. It is now read-only.

Possible bug with lowercasing of email address on signup #54

Open
alexwlchan opened this issue Jun 4, 2018 · 1 comment
Open

Possible bug with lowercasing of email address on signup #54

alexwlchan opened this issue Jun 4, 2018 · 1 comment

Comments

@alexwlchan
Copy link
Contributor

I've had an email from somebody about a possible bug with signup.

Their steps:

  1. Register with email address PyConUK@{name}.fastmail.co.uk.
  2. They received a confirmation email at pyconuk@{name}.fastmail.co.uk – note the lowercasing.
  3. Trying to log in with PyConUK@{name}.fastmail.co.uk and their password failed, but logging in with the lowercased address and the same password succeeded.

Email addresses should be case sensitive, so it shouldn't behave this way.

I’ve been unable to reproduce the error, but my original signup was with an all-lowercased email address. If I change the email address in my profile to PyConUK@{myname}.fastmail.co.uk, I can still log in with the mixed case version.

I can't see anywhere obvious where we're lowercasing the addresses, but raising here just in case – the person was pretty confident in what they’d seen. Even if we can't find the bug, it's useful to know in case somebody else has the same login problems.

@inglesp
Copy link
Contributor

inglesp commented Jun 4, 2018

I can't reproduce this. Through the sign-up page, I created a new user with a mixed-case email address, and that email address was persisted to the database unchanged.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants