Force email lowercase on signup and login.

BrunoBernardino · Aug 26, 2023 · 73cf615 · 73cf615
1 parent 8f9e9f2
commit 73cf615
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/public/ts/utils.ts b/public/ts/utils.ts
@@ -176,8 +176,10 @@ export async function validateLogin(email: string, password: string) {
 
     const passwordKey = await Encryption.getAuthKey(password);
 
+    const lowercaseEmail = (email || '').toLocaleLowerCase().trim();
+
     const body: { email: string } = {
-      email,
+      email: lowercaseEmail,
     };
 
     const response = await fetch('/api/session', { method: 'POST', headers, body: JSON.stringify(body) });
@@ -235,7 +237,7 @@ export async function validateLogin(email: string, password: string) {
     const session: StoredSession = {
       sessionId,
       userId: user.id,
-      email,
+      email: lowercaseEmail,
       keyPair,
     };
 
@@ -261,8 +263,10 @@ export async function createAccount(email: string, password: string) {
     const keyPair = await Encryption.generateKeyPair();
     const encryptedKeyPair = await Encryption.encrypt(JSON.stringify(keyPair), passwordKey);
 
+    const lowercaseEmail = (email || '').toLocaleLowerCase().trim();
+
     const body: { email: string; encrypted_key_pair: string } = {
-      email,
+      email: lowercaseEmail,
       encrypted_key_pair: encryptedKeyPair,
     };
 
@@ -276,7 +280,7 @@ export async function createAccount(email: string, password: string) {
     const session: StoredSession = {
       sessionId,
       userId: user.id,
-      email,
+      email: lowercaseEmail,
       keyPair,
     };