Case-insensitive email lookup so reset emails send

FixSecurityService
Shipped
June 16, 2026 at 12:21 AM UTC
Author
Kamo
Commit
98e38b0

Password recovery lowercased the input but findByEmailEmail does a case-sensitive match against the stored email (e.g. Sage@KamoCRM.com), so the user was never found and no reset email was sent. Switch all four recovery lookups (email initiate, questions fetch/verify, seed verify) to findByEmailEmailIgnoreCase.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing