devise-uncommon_password-alt 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 5bd720834ade5f20fe68dd5c27e7bb3b81c59d5de67cf7693b8b180fbe3e2de1
+  data.tar.gz: 9fc4d4f2ec6b299d40dec5849f4eb7c8a66ba7e1a6963656a85d58655b4e2108
+SHA512:
+  metadata.gz: 14dedf1ed17934e430d65fc73c42a4986cab043efeaef0b124c249b46bd057ca4b3cf46e31b6e08d8e085064a0231c8bc6bbb5e79bad31f74627df9576dcd4d1
+  data.tar.gz: db8fb452e3c31cdda04afa9396c4eedf9f413d27b3747ecc90bdad9fbc1238eb4dcfcb6edc9d3266c545615b9c9a14d32160ad578611c9a7696584750c9c54cc

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2017 Chris Larsen
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,75 @@
+## Notice
+
+This project is not frequently maintained. Please check the original source: https://github.com/HCLarsen/devise-uncommon_password.
+
+# Devise Uncommon Password
+
+[![Build Status](https://travis-ci.org/HCLarsen/devise-uncommon_password.svg?branch=master)](https://travis-ci.org/HCLarsen/devise-uncommon_password)
+[![Code Climate](https://codeclimate.com/github/HCLarsen/devise-uncommon_password.svg)](https://codeclimate.com/github/HCLarsen/devise-uncommon_password)
+
+Devise::UncommonPassword is an extension for the [devise](https://github.com/heartcombo/devise) gem, which prevents users from signing up using one of the 100 most common passwords. The list is derived from 10-million-password-list-top-1000000.txt found at: https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/10-million-password-list-top-1000000.txt.
+
+## Usage
+
+Add the `:uncommon_password` module to your model:
+
+```ruby
+class AdminUser < ApplicationRecord
+  devise :database_authenticatable,
+         :recoverable, :rememberable, :trackable, :validatable, :uncommon_password
+end
+```
+
+By default, the password is checked against the 100 most common passwords that fit within the minimum and maximum lengths specified in the /config/initializers/devise.rb file. However, if a developer wants to check against a larger list, they may override this default by adding the following line to that same file:
+
+```ruby
+# Number of common passwords to check entered password against.
+config.password_matches = 1000
+```
+
+### Additional Enhancements
+
+Added support to allow different password files to be loaded depending on environment
+
+
+### Internationalization and Customization
+
+The default message for users who attempt to use a common password is:
+
+```
+is a very common password. Please choose something harder to guess.
+```
+
+This can be changed by modifying the `devise.en.yml` file, under errors/messages/common_password. Translations can be provided using the devise translation files in the same location.
+
+```yml
+en:
+  errors:
+    messages:
+      common_password: 'is a very common password. Please choose something harder to guess.'
+```
+
+## Installation
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'devise-uncommon_password'
+```
+
+And then execute:
+```bash
+$ bundle install
+```
+
+## Contributing
+
+You can contribute by doing the following:
+
+* Check out the issue tracker to make sure someone already hasn't requested it and/or contributed it
+* Fork it
+* Write your changes
+* Commit
+* Send a pull request
+
+## License
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,33 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'Devise::UncommonPassword'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.md')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+
+
+
+
+
+require 'bundler/gem_tasks'
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+
+task default: :test

data/lib/devise/uncommon_password/locales/en.yml

@@ -0,0 +1,4 @@
+en:
+  errors:
+    messages:
+      common_password: 'is a very common password. Please choose something harder to guess.'

data/lib/devise/uncommon_password/model.rb

@@ -0,0 +1,40 @@
+module Devise
+  module Models
+    # The UncommonPassword module adds a new validation for Devise Models.
+    # No modifications to routes or controllers needed.
+    # Simply add :uncommon_password to the list of included modules in your
+    # devise module, and all new registrations will be blocked if they use
+    # a common password.
+    module UncommonPassword
+      extend ActiveSupport::Concern
+      # Returns a list of the 100 most common passwords.
+      def self.common_passwords
+        passwords_file = File.join(File.dirname(__FILE__), Devise.password_text_file)
+
+        passwords = []
+        File.open(passwords_file, "r") do |file|
+          file.each { |password| passwords << password.chomp.downcase }
+        end
+        passwords.select! {|password| Devise.password_length.include? password.length }
+        passwords[0..Devise.password_matches-1]
+      end
+
+      included do
+        validate :not_common_password, if: :password_required?
+      end
+
+      module ClassMethods
+        Devise::Models.config(self, :password_matches)
+        Devise::Models.config(self, :password_text_file)
+      end
+
+      private
+
+      def not_common_password
+        if Devise::Models::UncommonPassword.common_passwords.include? password.downcase
+          errors.add(:password, :common_password)
+        end
+      end
+    end
+  end
+end