Add login email lowercasing to backend

This commit is contained in:
Tuan Dang
2023-08-23 18:02:18 +07:00
parent 8f57377130
commit 4e1abc6eba
4 changed files with 8 additions and 10 deletions

View File

@@ -11,7 +11,7 @@ router.post("/token", validateRequest, authController.getNewToken);
router.post( // TODO endpoint: deprecate (moved to api/v3/auth/login1) router.post( // TODO endpoint: deprecate (moved to api/v3/auth/login1)
"/login1", "/login1",
authLimiter, authLimiter,
body("email").exists().trim().notEmpty(), body("email").exists().trim().notEmpty().toLowerCase(),
body("clientPublicKey").exists().trim().notEmpty(), body("clientPublicKey").exists().trim().notEmpty(),
validateRequest, validateRequest,
authController.login1 authController.login1
@@ -20,7 +20,7 @@ router.post( // TODO endpoint: deprecate (moved to api/v3/auth/login1)
router.post( // TODO endpoint: deprecate (moved to api/v3/auth/login2) router.post( // TODO endpoint: deprecate (moved to api/v3/auth/login2)
"/login2", "/login2",
authLimiter, authLimiter,
body("email").exists().trim().notEmpty(), body("email").exists().trim().notEmpty().toLowerCase(),
body("clientProof").exists().trim().notEmpty(), body("clientProof").exists().trim().notEmpty(),
validateRequest, validateRequest,
authController.login2 authController.login2

View File

@@ -8,7 +8,7 @@ import { authLimiter } from "../../helpers/rateLimiter";
router.post( // TODO: deprecate (moved to api/v3/auth/login1) router.post( // TODO: deprecate (moved to api/v3/auth/login1)
"/login1", "/login1",
authLimiter, authLimiter,
body("email").isString().trim().notEmpty(), body("email").isString().trim().notEmpty().toLowerCase(),
body("clientPublicKey").isString().trim().notEmpty(), body("clientPublicKey").isString().trim().notEmpty(),
validateRequest, validateRequest,
authController.login1 authController.login1
@@ -17,7 +17,7 @@ router.post( // TODO: deprecate (moved to api/v3/auth/login1)
router.post( // TODO: deprecate (moved to api/v3/auth/login1) router.post( // TODO: deprecate (moved to api/v3/auth/login1)
"/login2", "/login2",
authLimiter, authLimiter,
body("email").isString().trim().notEmpty(), body("email").isString().trim().notEmpty().toLowerCase(),
body("clientProof").isString().trim().notEmpty(), body("clientProof").isString().trim().notEmpty(),
validateRequest, validateRequest,
authController.login2 authController.login2

View File

@@ -9,7 +9,7 @@ const router = express.Router();
router.post( router.post(
"/login1", "/login1",
authLimiter, authLimiter,
body("email").isString().trim(), body("email").isString().trim().toLowerCase(),
body("providerAuthToken").isString().trim().optional({nullable: true}), body("providerAuthToken").isString().trim().optional({nullable: true}),
body("clientPublicKey").isString().trim().notEmpty(), body("clientPublicKey").isString().trim().notEmpty(),
validateRequest, validateRequest,
@@ -19,7 +19,7 @@ router.post(
router.post( router.post(
"/login2", "/login2",
authLimiter, authLimiter,
body("email").isString().trim(), body("email").isString().trim().toLowerCase(),
body("providerAuthToken").isString().trim().optional({nullable: true}), body("providerAuthToken").isString().trim().optional({nullable: true}),
body("clientProof").isString().trim().notEmpty(), body("clientProof").isString().trim().notEmpty(),
validateRequest, validateRequest,

View File

@@ -45,15 +45,13 @@ export const InitialStep = ({
return; return;
} }
const sanitizedEmail = email.toLowerCase();
setIsLoading(true); setIsLoading(true);
if (queryParams && queryParams.get("callback_port")) { if (queryParams && queryParams.get("callback_port")) {
const callbackPort = queryParams.get("callback_port") const callbackPort = queryParams.get("callback_port")
// attemptCliLogin // attemptCliLogin
const isCliLoginSuccessful = await attemptCliLogin({ const isCliLoginSuccessful = await attemptCliLogin({
email: sanitizedEmail, email: email.toLowerCase(),
password, password,
}) })
@@ -80,7 +78,7 @@ export const InitialStep = ({
} }
} else { } else {
const isLoginSuccessful = await attemptLogin({ const isLoginSuccessful = await attemptLogin({
email: sanitizedEmail, email: email.toLowerCase(),
password, password,
}); });
if (isLoginSuccessful && isLoginSuccessful.success) { if (isLoginSuccessful && isLoginSuccessful.success) {