Ensure allowed users check is case-insensitive and trims spaces

Author: akhilgusain

functions/publish.js

@@ -53,13 +53,15 @@ exports.handler = async function(event) {
     const command = params.get('command');
     const userId = params.get('user_id');
 
-    const allowedUsers = (process.env.ALLOWED_USERS || '').split(',');
-    if (!allowedUsers.includes(userId)) {
+    const allowedUsers = (process.env.ALLOWED_USERS || '')
+      .split(',')
+      .map(u => u.trim().toLowerCase());
+    if (!allowedUsers.includes(userId.toLowerCase())) {
       throw new Error(`User '${params.get('user_name')}' is not allowed to run command`);
     }
 
     const expectedCommand = process.env.PUBLISH_COMMAND;
-    if (expectedCommand && expectedCommand == command) {
+    if (expectedCommand && expectedCommand === command) {
       const githubToken = process.env.GITHUB_TOKEN;
       const repo = process.env.GITHUB_REPO;
       await axios({