KamoCRM

Case-insensitive email lookup so reset emails send

FixSecurityService
Shipped
June 16, 2026 at 12:21 AM UTC
Author
Kamo
Commit
98e38b0

Password recovery lowercased the input but findByEmailEmail does a case-sensitive match against the stored email (e.g. Sage@KamoCRM.com), so the user was never found and no reset email was sent. Switch all four recovery lookups (email initiate, questions fetch/verify, seed verify) to findByEmailEmailIgnoreCase.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing