isaacs/npm — Issue #1787: Username case sensitivy can lock users out of their packages
Author: EvanDotPro
Created: 2011-11-25 19:36:38+00:00
State: open

### Scenario:

1. Registererd username `EvanDotPro` prior to commit [c71a90fe47b](https://github.com/isaacs/npmjs.org/commit/c71a90fe47b67b91526ae0b4b026f69d8154f704)
2. Published package `shorty` as `EvanDotPro`
3. Time passes, fresh new Fedora 16 install, compile fresh copy of Node 0.6.3 (npm now included)
4. Ran `npm adduser` and configure `evandotpro` (Forgetting that I used upper-case originally, and assuming it wouldn't matter)
5. Tried running `npm owner add bjy shorty` to add a fellow developer as an owner on the `shorty` package. Received warning, "forbidden user: evandotpro not authorized to modify shorty"
6. Ran `npm owner ls shorty`, which lists `EvanDotPro` as the owner.
7. Attempt to run `npm adduser` with `EvanDotPro`, but receive notice that name must be lowercase.
8. Attempt to reset password for `EvanDotPro` via [admin.npmjs.org](http://admin.npmjs.org/)
9. After clicking the reset link in my email, it notifies me the `EvanDotPro` account has been deleted and I can re-register it now. (I can't, because it contains uppercase letters)
10. Tried resetting the lowercase `evandotpro` account again too, just in case... No dice.

So it seems that I'm locked out of managing our `shorty` package due to some bad timing and the fact that I originally had uppsercase letters in my username.