fix(auth): make identityProviderId lookup case-insensitive (#26405)

SAML IdPs may send NameIDs with different casing than stored, causing login failures. Aligns with the existing case-insensitive email lookup pattern
2026-01-05 14:00:11 +00:00
parent f8e70517d1
commit 0109427d04
1 changed files with 4 additions and 1 deletions
@@ -865,7 +865,10 @@ export const getOptions = ({
          },
          where: {
            identityProvider: idP,
-            identityProviderId: account.providerAccountId,
+            identityProviderId: {
+              equals: account.providerAccountId,
+              mode: "insensitive",
+            },
          },
        });