Skip to content

Medium: Login should not be case-sensitive for email addresses #16

@Stephanieewelu

Description

@Stephanieewelu

Dear Team,

Currently, the login process treats email addresses as case-sensitive. This causes login attempts to fail if the casing of the email does not exactly match the one stored in the system. For example, User@Email.com is treated differently from user@email.com.

Expected Behavior:

Email addresses should be treated in a case-insensitive manner during authentication, as per RFC 5321 section 2.4, which states that the local-part of the email is case-sensitive in theory, but in practice, most email systems treat it as case-insensitive.

Steps to Reproduce:

Register a user with email: User@Email.com

Attempt to log in with user@email.com

Login fails due to case mismatch

Proposed Fix:

Normalize email addresses by converting them to lowercase before storing and comparing during login.

Ensure changes don't affect current users negatively.

I noticed and issue, the login is quite case senstive for email address and it ought not to be so

See attached the images showing the errors

Image

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions