From 7c8b1702765a709c4451428b95e5b6a3eaf38869 Mon Sep 17 00:00:00 2001
From: AKP <abi@tdpain.net>
Date: Sat, 12 Oct 2024 19:37:06 +0100
Subject: [PATCH] Case-insensitively compare user logins

---
 tailscaleAuth.go | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/tailscaleAuth.go b/tailscaleAuth.go
index 794554a..ff7c6bb 100644
--- a/tailscaleAuth.go
+++ b/tailscaleAuth.go
@@ -7,6 +7,7 @@ import (
 	"github.com/caddyserver/caddy/v2/modules/caddyhttp/caddyauth"
 	"net/http"
 	"strconv"
+	"strings"
 	"tailscale.com/client/tailscale"
 	"time"
 )
@@ -35,7 +36,7 @@ func (ta *TailscaleAuth) Provision(caddy.Context) error {
 
 	ta.allowedUsersMap = make(map[string]struct{})
 	for _, u := range ta.AllowedUsers {
-		ta.allowedUsersMap[u] = struct{}{}
+		ta.allowedUsersMap[strings.ToLower(u)] = struct{}{}
 	}
 
 	return nil
@@ -52,7 +53,7 @@ func (ta *TailscaleAuth) Authenticate(_ http.ResponseWriter, req *http.Request)
 		return caddyauth.User{}, false, err
 	}
 
-	if _, found := ta.allowedUsersMap[whois.UserProfile.LoginName]; len(ta.allowedUsersMap) != 0 && !found {
+	if _, found := ta.allowedUsersMap[strings.ToLower(whois.UserProfile.LoginName)]; len(ta.allowedUsersMap) != 0 && !found {
 		return caddyauth.User{}, false, nil
 	}