Merge pull request #7610 from LibreSign/backport/7608/stable33

[stable33] fix: hide account identifier from SignerCommonName

Author: vitormattos

lib/Service/SignFileService.php

@@ -948,7 +948,11 @@ private function normalizeCertificateFieldToString(mixed $value): string {
 					$flattened[] = (string)$item;
 				}
 			});
-			return implode(', ', $flattened);
+			$displayValues = array_values(array_filter(
+				$flattened,
+				static fn (string $item) => !preg_match('/^account:\s*/i', $item),
+			));
+			return implode(', ', $displayValues);
 		}
 
 		return $value === null ? '' : (string)$value;

tests/php/Unit/Service/SignFileServiceTest.php

@@ -1246,6 +1246,22 @@ public static function providerGetSignatureParamsCommonName(): array {
 				'',
 				'',
 			],
+			'legacy AD/LDAP cert with account: prefix in CN array' => [
+				[
+					'issuer' => ['CN' => 'LibreCode CA'],
+					'subject' => ['CN' => ['account:johndoe', 'John Doe']],
+				],
+				'LibreCode CA',
+				'John Doe',
+			],
+			'legacy AD/LDAP cert with spaced account: prefix in CN array' => [
+				[
+					'issuer' => ['CN' => 'LibreCode CA'],
+					'subject' => ['CN' => ['account: johndoe', 'John Doe']],
+				],
+				'LibreCode CA',
+				'John Doe',
+			],
 		];
 	}