Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

System ignore cases in username field in the login page #2460

Open
Nenge1 opened this issue Sep 7, 2017 · 5 comments
Open

System ignore cases in username field in the login page #2460

Nenge1 opened this issue Sep 7, 2017 · 5 comments

Comments

@Nenge1
Copy link
Contributor

Nenge1 commented Sep 7, 2017

For this case, username: mifos and password: password. The system allow username: MIFOS as valid username.
image
In my suggestion, It is not a good practice as this is a credentials, not the name of the user. Thus, the system should test the exact username without ignoring cases.

@gkrishnan724
Copy link
Collaborator

gkrishnan724 commented Sep 7, 2017

@Nenge1 I believe this should be reported in the fineract side.

@Nenge1
Copy link
Contributor Author

Nenge1 commented Sep 7, 2017

Thanks @gkrishnan724, I will do so then

@santoshconflux
Copy link
Collaborator

Same issue raised at Fineract side: https://issues.apache.org/jira/browse/FINERACT-522

@bauripalash
Copy link
Contributor

bauripalash commented Nov 9, 2018

I don't think this is a problem. User IDs shouldn't be case-sensitive.

Assume, I have username palash
And now you'll not be able to have username palaSH , that's why we don't need to validate usernames this way.

Even GitHub allows me logging in with BauriPalash , where my username is bauripalash

@santoshconflux
Copy link
Collaborator

@bauripalash , In banking login, username may be case sensitive in some cases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants