0c4290261e
When OIDC providers (e.g. Keycloak) use email addresses as usernames or when claims.sub contains @ or other invalid characters, the username padding and collision-suffix logic could introduce invalid characters. The fix filters claims.sub through the same allowed-character filter before using it in username construction. Fixes DioCrafts/OxiCloud#259