aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorCleopatra Enjeck M. <patrathewhiz@gmail.com>2025-03-03 04:18:59 +0000
committerbackportbot[bot] <backportbot[bot]@users.noreply.github.com>2025-03-05 06:20:53 +0000
commit3f1c70bad31e5c840aaa95f8d4f64ea22ae67d1c (patch)
treee14d84982f08a448c754960fa64cb4f7a639b5fe
parent9db02f261219fe4e70cd15c99d44a0338e698154 (diff)
downloadnextcloud-server-backport/50989/stable29.tar.gz
nextcloud-server-backport/50989/stable29.zip
fix: use mb_strtolower to convert login namebackport/50989/stable29
Signed-off-by: Cleopatra Enjeck M. <patrathewhiz@gmail.com>
-rw-r--r--lib/private/User/Session.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/User/Session.php b/lib/private/User/Session.php
index f33297d75dd..8d0dbf8395e 100644
--- a/lib/private/User/Session.php
+++ b/lib/private/User/Session.php
@@ -810,7 +810,7 @@ class Session implements IUserSession, Emitter {
* Check if login names match
*/
private function validateTokenLoginName(?string $loginName, IToken $token): bool {
- if (strcasecmp($token->getLoginName(), $loginName ?? '') !== 0) {
+ if (mb_strtolower($token->getLoginName()) !== mb_strtolower($loginName ?? '')) {
// TODO: this makes it impossible to use different login names on browser and client
// e.g. login by e-mail 'user@example.com' on browser for generating the token will not
// allow to use the client token with the login name 'user'.