peertube-plugin-auth-openid-connect: unsafe behavior for usernames with upper case and some special characters
PeerTube only seems to support lower case and some special characters for usernames. I am trying to integrate with an identity provider that only supplies upper case usernames. Since this leads to usernames like ___
and _____
, the current behavior is problematic. I have also had reports of users that logged in this way actually being identified as a different, seemingly random user altogether.
While the latter fallback behavior may be a security issue in the PeerTube core, a small change (maybe opt-in for backwards compatibility) that converts usernames to lower case could alleviate this issue within the scope of this plugin.