- user = find(:first, :conditions => ["email = ? OR display_name = ?", options[:username], options[:username]])
- user = nil if user and user.pass_crypt != OSM::encrypt_password(options[:password], user.pass_salt)
+ user = where("email = ? OR display_name = ?", options[:username], options[:username]).first
+
+ if user.nil?
+ users = where("LOWER(email) = LOWER(?) OR LOWER(display_name) = LOWER(?)", options[:username], options[:username])
+
+ if users.count == 1
+ user = users.first
+ end
+ end
+
+ if user and PasswordHash.check(user.pass_crypt, user.pass_salt, options[:password])
+ if PasswordHash.upgrade?(user.pass_crypt, user.pass_salt)
+ user.pass_crypt, user.pass_salt = PasswordHash.create(options[:password])
+ user.save
+ end
+ else
+ user = nil
+ end