-
Notifications
You must be signed in to change notification settings - Fork 6
Description
Currently, the login process treats email addresses as case-sensitive. This causes login attempts to fail if the casing of the email does not exactly match the one stored in the system. For example, User@Email.com is treated differently from user@email.com.
Expected Behavior:
Email addresses should be treated in a case-insensitive manner during authentication, as per RFC 5321 section 2.4, which states that the local-part of the email is case-sensitive in theory, but in practice, most email systems treat it as case-insensitive.
Steps to Reproduce:
Register a user with email: User@Email.com
Attempt to log in with user@email.com
Login fails due to case mismatch
Proposed Fix:
Normalize email addresses by converting them to lowercase before storing and comparing during login.
Ensure changes don't affect current users negatively.
