@yuvipanda Adding you here because I can't really figure out how that public link button is created and where I might try to look to fix it. (we could go to something like location ~* on nginx, but it might have performance impacts).

Seeing https://github.com/yuvipanda/nbpawspublic/blob/master/nbpawspublic/static/main.js it seems the public link is a simple replace upon the "private" link. This makes for a weird "technical" possibility of two users having the same link, however, since we have policies against "similar usernames" this isn't a real issue for Wikimedia wikis and PAWS. (eg Chicobot and ChicoBot)

It is likely, however, that the simplest solution is to change nginx on the public links to match the behaviour for private links.

It seems private paws links are unaffected by user input and likely will not create problems for user with cased versions of other users. It does seem like a good idea to set the usernames in these links to their proper case, however. And it would resolve this issue.

Apparently Jupyterhub lowercases every username.

Does anyone know a way to query the mediawiki api for case-insensitive usernames? We could send the public link to the centralid (in the case of a single user for a case insensitive user search, which would be most of them).

At any rate, I'll start an issue upstream to see the reason for that and maybe allow us to use case sensitive names.

Upstream issue: https://github.com/jupyterhub/oauthenticator/issues/168.

Thanks for your work on this! (speaking as one of the victims, as user HaeB != haeb)
It seems that your upstream pull request has since gotten merged?