core: always lowercase email address when resetting password

2026-07-09 20:09:36 +02:00 · 2026-06-25 13:09:19 +05:00
parent 5a0ca0bed9
commit aceb6db8b8
1 changed files with 3 additions and 1 deletions
--- a/packages/core/src/api/user-manager.ts
+++ b/packages/core/src/api/user-manager.ts
@@ -696,7 +696,9 @@ class UserManager {
      `${constants.API_HOST}/users/password/${type}`,
      {
        oldPassword: oldPassword,
-        newPassword: await this.db.storage().hash(new_password, email),
+        newPassword: await this.db
+          .storage()
+          .hash(new_password, email.toLowerCase()),
        userKeys: updateUserPayload
      },
      token