Skip to content

Fixed mixed case usernames causing user not found exception during 2fa

Ben requested to merge fix/recovery-username-2610 into master

Closes minds#2610 (closed)

Summary

When passing in the username for 2fa recovery, we use the username the member originally entered in the login form. If this is a mixed case, recovery fails with a USER NOT FOUND exception.

Testing

  1. Setup a user with 2FA,
  2. Make a note of recovery code
  3. Log out
  4. Login, make your username all upper case
  5. Try to recover 2fa (it should let you recover - previously it would not)

Regression scope

Will this work for all users? Have we had any weird username formats in the past I'm unaware of?

Merge request reports