From dcb21adb40a44c8108f1d652cc6ddd59ae7c4024 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Wed, 10 Jun 2020 09:43:44 -0700
Subject: case insensitive challenge

---
 routes/users.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/routes/users.js b/routes/users.js
index 76a8bc8d..fc2f2975 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -101,7 +101,7 @@ app.post("/register", async (req, res) => {
 
   let ip = req.headers["x-forwarded-for"] || req.connection.remoteAddress;
 
-  if (!challenge[ip] || user.response !== challenge[ip]) {
+  if (!challenge[ip] || user.response.toLowerCase() !== challenge[ip].toLowerCase()) {
     l.info("failed challenge", ip, user.response, challenge[ip]);
     return res.status(500).send("Failed challenge");
   }
-- 
cgit v1.2.3