From 9dbe50322d77188af73496738f8e5695a2cf28ae Mon Sep 17 00:00:00 2001 From: Christine Dodrill Date: Tue, 4 Aug 2015 17:15:55 -0700 Subject: [PATCH] Only compare lowercase representations of usernames Closes #6 --- src/server.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/server.js b/src/server.js index 39a6710..1ff35e7 100644 --- a/src/server.js +++ b/src/server.js @@ -147,7 +147,7 @@ function auth(data) { if (data.token == client.token) { success = true; } - } else if (client.config.user == data.user) { + } else if (client.config.user.toLowerCase() == data.user.toLowerCase()) { if (bcrypt.compareSync(data.password || "", client.config.password)) { success = true; }