Sultan
/
Flowise
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix use case-insensitive email lookup and comparison during login (#5145) 

fix: use case-insensitive email lookup and comparison
This commit is contained in:
Ong Chung Yau 2025-09-05 21:04:12 +08:00 committed by GitHub
parent 42fed5713e
commit c17dd1f141
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/server/src/enterprise/services/account.service.ts
View File

@ -176,7 +176,7 @@ export class AccountService {
if (data.user.tempToken) { if (data.user.tempToken) {
const user = await this.userService.readUserByToken(data.user.tempToken, queryRunner) const user = await this.userService.readUserByToken(data.user.tempToken, queryRunner)
if (!user) throw new InternalFlowiseError(StatusCodes.NOT_FOUND, UserErrorMessage.USER_NOT_FOUND) if (!user) throw new InternalFlowiseError(StatusCodes.NOT_FOUND, UserErrorMessage.USER_NOT_FOUND)
if (user.email !== data.user.email) if (user.email.toLowerCase() !== data.user.email?.toLowerCase())
throw new InternalFlowiseError(StatusCodes.BAD_REQUEST, UserErrorMessage.INVALID_USER_EMAIL) throw new InternalFlowiseError(StatusCodes.BAD_REQUEST, UserErrorMessage.INVALID_USER_EMAIL)
const name = data.user.name const name = data.user.name
if (data.user.credential) user.credential = this.userService.encryptUserCredential(data.user.credential) if (data.user.credential) user.credential = this.userService.encryptUserCredential(data.user.credential)

5
packages/server/src/enterprise/services/user.service.ts
View File

@ -5,7 +5,7 @@ import { getRunningExpressApp } from '../../utils/getRunningExpressApp'
import { Telemetry, TelemetryEventType } from '../../utils/telemetry' import { Telemetry, TelemetryEventType } from '../../utils/telemetry'
import { User, UserStatus } from '../database/entities/user.entity' import { User, UserStatus } from '../database/entities/user.entity'
import { isInvalidEmail, isInvalidName, isInvalidPassword, isInvalidUUID } from '../utils/validation.util' import { isInvalidEmail, isInvalidName, isInvalidPassword, isInvalidUUID } from '../utils/validation.util'
import { DataSource, QueryRunner } from 'typeorm' import { DataSource, ILike, QueryRunner } from 'typeorm'
import { generateId } from '../../utils' import { generateId } from '../../utils'
import { GeneralErrorMessage } from '../../utils/constants' import { GeneralErrorMessage } from '../../utils/constants'
import { getHash } from '../utils/encryption.util' import { getHash } from '../utils/encryption.util'
@ -54,8 +54,9 @@ export class UserService {
} }
public async readUserByEmail(email: string | undefined, queryRunner: QueryRunner) { public async readUserByEmail(email: string | undefined, queryRunner: QueryRunner) {
if (!email) throw new InternalFlowiseError(StatusCodes.BAD_REQUEST, UserErrorMessage.INVALID_USER_EMAIL)
this.validateUserEmail(email) this.validateUserEmail(email)
return await queryRunner.manager.findOneBy(User, { email }) return await queryRunner.manager.findOneBy(User, { email: ILike(email) })
} }
public async readUserByToken(token: string | undefined, queryRunner: QueryRunner) { public async readUserByToken(token: string | undefined, queryRunner: QueryRunner) {