I’m bumping this topic especially for this case:
Firstly, you now allow UTF-8 usernames… so…
Also, this issue was discovered: Unicode username with Σ as the final char leads to an error loading profile page
Long story short, there are inconsistencies between Javascript’s, Ruby’s and Postgresql’s handling of various UTF-8 characters. (eg: in uppercasing-lowercasing). I think the aforementioned issue could make UTF-8 characters unsafe in usernames if another routing method, involving the user id is not implemented.
So, it’s a chance to revisit this decision