[oidc] Normalize GitHub environment claim (#13576)

* Add a failing test

* Normalize GitHub's `environment` claim

Author: di

tests/unit/oidc/test_utils.py

@@ -34,6 +34,7 @@ def test_find_publisher_by_issuer_bad_issuer_url():
         (None, uuid.UUID("aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa")),
         ("some_other_environment", uuid.UUID("aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa")),
         ("some_environment", uuid.UUID("bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb")),
+        ("sOmE_eNvIrOnMeNt", uuid.UUID("bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb")),
     ],
 )
 def test_find_publisher_by_issuer_github(db_request, environment, expected_id):

warehouse/oidc/utils.py

@@ -57,7 +57,7 @@ def find_publisher_by_issuer(session, issuer_url, signed_claims, *, pending=Fals
                     repository_name=repository_name,
                     repository_owner=repository_owner,
                     repository_owner_id=signed_claims["repository_owner_id"],
-                    environment=environment,
+                    environment=environment.lower(),
                 )
                 .filter(
                     literal(workflow_ref).like(