Stripped username before login (#16921)

EmanuelGustafzon · web-flow · commit 9338395a59b7 · 2024-08-16T20:59:10.000+01:00
* Stripped username before login
diff --git a/src/Umbraco.Web.Common/Security/UmbracoSignInManager.cs b/src/Umbraco.Web.Common/Security/UmbracoSignInManager.cs
@@ -165,7 +165,8 @@ public override async Task<SignInResult> PasswordSignInAsync(TUser user, string
     public override async Task<SignInResult> PasswordSignInAsync(string userName, string password, bool isPersistent, bool lockoutOnFailure)
     {
         // override to handle logging/events
-        TUser? user = await UserManager.FindByNameAsync(userName);
+        string strippedUsername = userName.Trim();
+        TUser? user = await UserManager.FindByNameAsync(strippedUsername);
         if (user == null)
         {
             return await HandleSignIn(null, userName, SignInResult.Failed);

Original file line number	Diff line number	Diff line change
`@@ -165,7 +165,8 @@ public override async Task<SignInResult> PasswordSignInAsync(TUser user, string`
`165`	`165`	`public override async Task<SignInResult> PasswordSignInAsync(string userName, string password, bool isPersistent, bool lockoutOnFailure)`
`166`	`166`	`{`
`167`	`167`	`// override to handle logging/events`
`168`		`- TUser? user = await UserManager.FindByNameAsync(userName);`
	`168`	`+ string strippedUsername = userName.Trim();`
	`169`	`+ TUser? user = await UserManager.FindByNameAsync(strippedUsername);`
`169`	`170`	`if (user == null)`
`170`	`171`	`{`
`171`	`172`	`return await HandleSignIn(null, userName, SignInResult.Failed);`