We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 40f669f + 3f1c70b commit 07b1313Copy full SHA for 07b1313
lib/private/User/Session.php
@@ -810,7 +810,7 @@ private function validateToken($token, $user = null) {
810
* Check if login names match
811
*/
812
private function validateTokenLoginName(?string $loginName, IToken $token): bool {
813
- if ($token->getLoginName() !== $loginName) {
+ if (mb_strtolower($token->getLoginName()) !== mb_strtolower($loginName ?? '')) {
814
// TODO: this makes it impossible to use different login names on browser and client
815
// e.g. login by e-mail 'user@example.com' on browser for generating the token will not
816
// allow to use the client token with the login name 'user'.
0 commit comments