add a test to confirm that anonymous users with

unique username that do collide when compared
insensitively can still be created.

Author: acinader

spec/ParseUser.spec.js

@@ -12,6 +12,7 @@ const MongoStorageAdapter = require('../lib/Adapters/Storage/Mongo/MongoStorageA
 const request = require('../lib/request');
 const passwordCrypto = require('../lib/password');
 const Config = require('../lib/Config');
+const cryptoUtils = require('../lib/cryptoUtils');
 
 function verifyACL(user) {
   const ACL = user.getACL();
@@ -2279,7 +2280,7 @@ describe('Parse.User testing', () => {
       );
     });
 
-    it('signup should fail with duplicate case insensitive email', async() => {
+    it('signup should fail with duplicate case insensitive email', async () => {
       const user = new Parse.User();
       user.setUsername('test1');
       user.setPassword('test');
@@ -2298,7 +2299,7 @@ describe('Parse.User testing', () => {
       );
     });
 
-    it('edit should fail with duplicate case insensitive email', async() => {
+    it('edit should fail with duplicate case insensitive email', async () => {
       const user = new Parse.User();
       user.setUsername('test1');
       user.setPassword('test');
@@ -2311,14 +2312,56 @@ describe('Parse.User testing', () => {
       user2.setEmail('[email protected]');
       await user2.signUp();
 
-      user2.setEmail('[email protected]')
+      user2.setEmail('[email protected]');
       await expectAsync(user2.save()).toBeRejectedWith(
         new Parse.Error(
           Parse.Error.EMAIL_TAKEN,
           'Account already exists for this email address.'
         )
       );
     });
+
+    describe('anonymous users', () => {
+      beforeEach(() => {
+        const insensitiveCollisions = [
+          'abcdefghijklmnop',
+          'Abcdefghijklmnop',
+          'ABcdefghijklmnop',
+          'ABCdefghijklmnop',
+          'ABCDefghijklmnop',
+          'ABCDEfghijklmnop',
+          'ABCDEFghijklmnop',
+          'ABCDEFGhijklmnop',
+          'ABCDEFGHijklmnop',
+          'ABCDEFGHIjklmnop',
+          'ABCDEFGHIJklmnop',
+          'ABCDEFGHIJKlmnop',
+          'ABCDEFGHIJKLmnop',
+          'ABCDEFGHIJKLMnop',
+          'ABCDEFGHIJKLMnop',
+          'ABCDEFGHIJKLMNop',
+          'ABCDEFGHIJKLMNOp',
+          'ABCDEFGHIJKLMNOP',
+        ];
+        // Random String gets called a lot before we get to relevant code
+        spyOn(cryptoUtils, 'randomString').and.returnValues(
+          ...insensitiveCollisions
+        );
+      });
+
+      it('should not fail on case insensitive matches', async () => {
+        const user1 = await Parse.AnonymousUtils.logIn();
+        const username1 = user1.get('username');
+        expect(username1).not.toBeUndefined();
+
+        const user2 = await Parse.AnonymousUtils.logIn();
+        const username2 = user2.get('username');
+        expect(username2).not.toBeUndefined();
+
+        expect(username2).not.toBe(username1);
+        expect(username2.toLowerCase()).toBe(username1.toLowerCase());
+      });
+    });
   });
 
   it('user cannot update email to existing user', done => {