search

mozilla / id.webmaker.org

OAuth 2.0 identity provider for Webmaker
https://id.webmaker.org
Mozilla Public License 2.0
19 stars 51 forks source link

Password reset flow is case sensitive on email address, which it probably shouldn't be #350

Open davidascher opened 9 years ago

davidascher commented 9 years ago

When I tried to sign up a new account on webmaker app w/ 'david.ascher@gmail.com', the app's login system told me an account already existed. I then went to reset password, but android autocomplete naturally uppercased the D in 'david.ascher@gmail.com'.

The bug is that when I reset the password for David.ascher@gmail.com, the password reset told me that the account didn't exist.

Can we not case-normalize email addresses in the DB? most MTAs are case-insensitive.