{"action":"opened","issue":{"url":"https://api.github.com/repos/aspnet/Security/issues/1907","repository_url":"https://api.github.com/repos/aspnet/Security","labels_url":"https://api.github.com/repos/aspnet/Security/issues/1907/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Security/issues/1907/comments","events_url":"https://api.github.com/repos/aspnet/Security/issues/1907/events","html_url":"https://github.com/aspnet/Security/issues/1907","id":378946445,"node_id":"MDU6SXNzdWUzNzg5NDY0NDU=","number":1907,"title":"AspNet.Identity doesn't respect LowercaseUrls","user":{"login":"u-abramchuk","id":902300,"node_id":"MDQ6VXNlcjkwMjMwMA==","avatar_url":"https://avatars1.githubusercontent.com/u/902300?v=4","gravatar_id":"","url":"https://api.github.com/users/u-abramchuk","html_url":"https://github.com/u-abramchuk","followers_url":"https://api.github.com/users/u-abramchuk/followers","following_url":"https://api.github.com/users/u-abramchuk/following{/other_user}","gists_url":"https://api.github.com/users/u-abramchuk/gists{/gist_id}","starred_url":"https://api.github.com/users/u-abramchuk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/u-abramchuk/subscriptions","organizations_url":"https://api.github.com/users/u-abramchuk/orgs","repos_url":"https://api.github.com/users/u-abramchuk/repos","events_url":"https://api.github.com/users/u-abramchuk/events{/privacy}","received_events_url":"https://api.github.com/users/u-abramchuk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-08T22:36:37Z","updated_at":"2018-11-08T22:36:37Z","closed_at":null,"author_association":"NONE","body":"Hi,\r\n\r\nI have an application base on IdentityServer4 and AspNet.Identity. I use the following configuration to make all URLs lowercase:\r\n```csharp\r\nservices.Configure<RouteOptions>(options => options.LowercaseUrls = true);\r\n```\r\nBut after the latest update (from Microsoft.AspNetCore.Identity v2.0.1 to v2.1.1) URL pointing to login page '/account/login' started to appear in pascal case like '/Account/Login'. \r\n\r\nAfter some investigation I found that exact place where this string comes from is [IdentityServiceCollectionExtensions.cs#L53](https://github.com/aspnet/Identity/blob/master/src/Identity/IdentityServiceCollectionExtensions.cs#L53):\r\n```csharp\r\n.AddCookie(IdentityConstants.ApplicationScheme, o =>\r\n            {\r\n                o.LoginPath = new PathString(\"/Account/Login\");\r\n                o.Events = new CookieAuthenticationEvents\r\n                {\r\n                    OnValidatePrincipal = SecurityStampValidator.ValidatePrincipalAsync\r\n                };\r\n            })\r\n```"}}
{"actor":{"display_login":"u-abramchuk"}}