From 2f34fe2fa7ca461ab7570f2708984b90364121e0 Mon Sep 17 00:00:00 2001 From: sahillllllllll-bit Date: Sat, 4 Apr 2026 15:11:56 +0000 Subject: [PATCH 1/2] fix: normalize email domain case in validateEmailDomain --- apps/meteor/app/lib/server/lib/validateEmailDomain.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/meteor/app/lib/server/lib/validateEmailDomain.js b/apps/meteor/app/lib/server/lib/validateEmailDomain.js index d00a8808e8aee..a0c7f88b674ca 100644 --- a/apps/meteor/app/lib/server/lib/validateEmailDomain.js +++ b/apps/meteor/app/lib/server/lib/validateEmailDomain.js @@ -21,7 +21,7 @@ settings.watch('Accounts_BlockedDomainsList', (value) => { emailDomainBlackList = value .split(',') .filter(Boolean) - .map((domain) => domain.trim()); + .map((domain) => domain.trim().toLowerCase()); }); settings.watch('Accounts_AllowedDomainsList', (value) => { if (!value) { @@ -43,7 +43,7 @@ export const validateEmailDomain = async function (email) { }); } - const emailDomain = email.substr(email.lastIndexOf('@') + 1); + const emailDomain = email.substr(email.lastIndexOf('@') + 1).toLowerCase(); if (emailDomainWhiteList.length && !emailDomainWhiteList.includes(emailDomain)) { throw new Meteor.Error('error-invalid-domain', 'The email domain is not in whitelist', { From 8bec5d45dbe6d573fc3bdadb26d7ff1f273e418f Mon Sep 17 00:00:00 2001 From: sahillllllllll-bit Date: Sat, 4 Apr 2026 15:27:36 +0000 Subject: [PATCH 2/2] fix: normalize whitelist domains to lowercase --- apps/meteor/app/lib/server/lib/validateEmailDomain.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/meteor/app/lib/server/lib/validateEmailDomain.js b/apps/meteor/app/lib/server/lib/validateEmailDomain.js index a0c7f88b674ca..c02a305dc0d50 100644 --- a/apps/meteor/app/lib/server/lib/validateEmailDomain.js +++ b/apps/meteor/app/lib/server/lib/validateEmailDomain.js @@ -32,7 +32,7 @@ settings.watch('Accounts_AllowedDomainsList', (value) => { emailDomainWhiteList = value .split(',') .filter(Boolean) - .map((domain) => domain.trim()); + .map((domain) => domain.trim().toLowerCase()); }); export const validateEmailDomain = async function (email) {