From 0535716391adc022ca35da8ba453fbfca1e83c76 Mon Sep 17 00:00:00 2001 From: "Cleopatra Enjeck M." Date: Mon, 3 Mar 2025 04:18:59 +0000 Subject: [PATCH] fix: use mb_strtolower to convert login name Signed-off-by: Cleopatra Enjeck M. --- lib/private/User/Session.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/private/User/Session.php b/lib/private/User/Session.php index 7a21473d20c..9a5713630c5 100644 --- a/lib/private/User/Session.php +++ b/lib/private/User/Session.php @@ -780,7 +780,7 @@ class Session implements IUserSession, Emitter { * Check if login names match */ private function validateTokenLoginName(?string $loginName, IToken $token): bool { - if (strcasecmp($token->getLoginName(), $loginName ?? '') !== 0) { + if (mb_strtolower($token->getLoginName()) !== mb_strtolower($loginName ?? '')) { // TODO: this makes it impossible to use different login names on browser and client // e.g. login by e-mail 'user@example.com' on browser for generating the token will not // allow to use the client token with the login name 'user'.