From dcf0530218c60ff079ca38d7d3707ac80bde7f97 Mon Sep 17 00:00:00 2001 From: René Klačan Date: Sun, 11 Jun 2017 02:29:08 +0200 Subject: Make sure email is case insensitive on all places (#3688) When case insensitivity is enabled via devise's `config.case_insensitive_keys` then `.find_for_authentication` method needs to be used instead of `.find_by` because second mentioned returns `nil` when valid email with different cases is passed. More info https://github.com/plataformatec/devise/wiki/How-To:-Use-case-insensitive-emails --- app/controllers/auth/sessions_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'app') diff --git a/app/controllers/auth/sessions_controller.rb b/app/controllers/auth/sessions_controller.rb index 79e3da5f9..bc3bd2f4b 100644 --- a/app/controllers/auth/sessions_controller.rb +++ b/app/controllers/auth/sessions_controller.rb @@ -27,7 +27,7 @@ class Auth::SessionsController < Devise::SessionsController if session[:otp_user_id] User.find(session[:otp_user_id]) elsif user_params[:email] - User.find_by(email: user_params[:email]) + User.find_for_authentication(email: user_params[:email]) end end -- cgit