We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 00c18bb commit 126563cCopy full SHA for 126563c
lib/private/User/Session.php
@@ -780,7 +780,7 @@ private function validateToken($token, $user = null) {
780
* Check if login names match
781
*/
782
private function validateTokenLoginName(?string $loginName, IToken $token): bool {
783
- if (strtolower($token->getLoginName() ?? '') !== strtolower($loginName ?? '')) {
+ if (strcasecmp($token->getLoginName(), $loginName ?? '') !== 0) {
784
// TODO: this makes it impossible to use different login names on browser and client
785
// e.g. login by e-mail 'user@example.com' on browser for generating the token will not
786
// allow to use the client token with the login name 'user'.
0 commit comments