email uniqueness is done with case-sensitivity on some databases about django-authtools HOT 8 OPEN

Django-improved-user argues that it's better to store the e-mail addresses in a case sensitive field and use case-insensitive queries to filter for a match: https://django-improved-user.readthedocs.io/en/latest/email_warning.html

@aidanlister's example seems to cover that, but he might also need to have an index on lower(email::text) to prevent duplicates? Without the unique index, another user might be able to create an uppercase version of an existing e-mail and have it match.

Although the first part of the e-mail is supposed to be case sensitive (according to RFC 5321), I don't know of any e-mail providers that actually do that. So maybe it doesn't matter?

from django-authtools.

A functional index on UPPER(email) would be the ideal solution on postgres, but we'd have to use email__iexact everywhere, and lookups by email wouldn't be indexed at all on mysql.

from django-authtools.

Maybe we could do get by with just dbindex=True and do our normalization outside of the database. Something similar to what BaseManager does here

Is there a problem just calling .lower() or .upper() on the address part of the email?

from django-authtools.

https://github.com/fusionbox/django-authtools/blob/master/authtools/models.py#L14

Is there anything we can do?

from django-authtools.

This is a bit of a trouble spot for users entering emails in interesting ways. 👍 for any fix..

from django-authtools.

#31 won't work for anyone on Postgres.

It simply does a .lower() on the incoming login, but not the database User.get operation. So if there's a capitalised email in the database it's impossible to login.

from django-authtools.

Here's a better way:

class AccountManager(models.Manager):
    def get_by_natural_key(self, username):
        field_name = f'{self.model.USERNAME_FIELD}__iexact'
        return self.get(**{field_name: username})

Set this on your custom user model.

from django-authtools.

Isn't that handled by CaseInsensitiveEmailBackendMixin?

from django-authtools.