Skip to content

Commit 254eec1

Browse files
authored
Add trim for email (#963)
1 parent a2991e1 commit 254eec1

File tree

7 files changed

+10035
-4
lines changed

7 files changed

+10035
-4
lines changed

api/src/Feature.Auth/ForgotPassword/Endpoint.cs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ public override void Configure()
2626

2727
public override async Task<Results<Ok, ProblemHttpResult>> ExecuteAsync(Request request, CancellationToken ct)
2828
{
29-
var user = await userManager.FindByEmailAsync(request.Email.Normalize());
29+
var user = await userManager.FindByEmailAsync(request.Email.Normalize().Trim());
3030
if (user is null || !await userManager.IsEmailConfirmedAsync(user))
3131
{
3232
logger.LogWarning("Possible user enumeration. Unknown email received {email}", request.Email);

api/src/Feature.Auth/ResetPassword/Endpoint.cs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ public override void Configure()
1515

1616
public override async Task<Results<Ok, ProblemHttpResult>> ExecuteAsync(Request request, CancellationToken ct)
1717
{
18-
var user = await userManager.FindByEmailAsync(request.Email.Normalize());
18+
var user = await userManager.FindByEmailAsync(request.Email.Normalize().Trim());
1919

2020
// Don't reveal that the user does not exist
2121
if (user is null)

api/src/Feature.Auth/Services/TokenService.cs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ internal class TokenService(UserManager<ApplicationUser> userManager,
2525
public async Task<Results<Ok<TokenResponse>, ValidationProblem>> GetTokenAsync(string email, string password, CancellationToken cancellationToken)
2626
{
2727
var validationCtx = ValidationContext.Instance;
28-
if (await userManager.FindByEmailAsync(email.Trim().Normalize()) is not { }
28+
if (await userManager.FindByEmailAsync(email.Trim().Normalize().Trim()) is not { }
2929
user
3030
|| !await userManager.CheckPasswordAsync(user, password))
3131
{

0 commit comments

Comments
 (0)