From 1b953f756e7bebe268fb5ca5787c6a630af94934 Mon Sep 17 00:00:00 2001
From: Abdullah Atta <abdullahatta@streetwriters.co>
Date: Mon, 29 Jun 2026 10:01:15 +0500
Subject: [PATCH] identity: force change email casing to lower case on password
 reset

---
 Streetwriters.Identity/Services/UserAccountService.cs | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Streetwriters.Identity/Services/UserAccountService.cs b/Streetwriters.Identity/Services/UserAccountService.cs
index 42e452d..8e43ef4 100644
--- a/Streetwriters.Identity/Services/UserAccountService.cs
+++ b/Streetwriters.Identity/Services/UserAccountService.cs
@@ -85,6 +85,13 @@ namespace Streetwriters.Identity.Services
 
             await mfaService.ResetMFAAsync(user);
             result = await userManager.AddPasswordAsync(user, newPassword);
+
+            // force change email to lowercase if it is not already
+            if (user.Email != null && user.Email != user.Email.ToLower())
+            {
+                var token = await userManager.GenerateChangeEmailTokenAsync(user, user.Email.ToLower());
+                result = await userManager.ChangeEmailAsync(user, user.Email.ToLower(), token);
+            }
             return result.Succeeded;
         }