devise-uncommon_password 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: fec8920be01efe2dad65aaa611a1e1ac240f6e98
+  data.tar.gz: 6b89c08574e04488c8ad56a55ff145c7af0dc8eb
+SHA512:
+  metadata.gz: c5587d5299a528fa6a9dbd49bb21f92b2b9d532de350d8d08384c0fb6e469306f651a67915512e60bcc44b161f299ff0b91e6c331477ff3f4e3b67f9f748087a
+  data.tar.gz: 4dac11d3fbff0dcdef44203dea660c59f6fda48fdad80bc54cefaaaa8ba65f8b946ab3e1cea954bd498677730770d7435c460909e7a699181047d97fe8ea8d92

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2017 Chris Larsen
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,37 @@
+# Devise Uncommon Password
+Devise::UncommonPassword is an extension for the devise gem, which prevents users from signing up using one of the 100 most common passwords. Currently, the list of common passwords is derived from the list at http://www.passwordrandom.com/most-popular-passwords. As devise already rejects passwords less than 8 characters in length, I removed all such passwords from the list, and then selected the top 100 from the remaining passwords.
+
+## Installation
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'devise-uncommon_password'
+```
+
+And then execute:
+```bash
+$ bundle install
+```
+
+Then add the ':uncommon_password' module to your model:
+```
+class User < ActiveRecord::Base
+devise :database_authenticatable, :registerable,
+       :recoverable, :rememberable, :trackable, :validatable, :uncommon_password
+end
+```
+
+And you're ready to go.
+
+## Contributing
+
+You can contribute by doing the following:
+
+* Check out the issue tracker to make sure someone already hasn't requested it and/or contributed it
+* Fork it
+* Write your changes
+* Commit
+* Send a pull request
+
+## License
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,33 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'Devise::UncommonPassword'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.md')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+
+
+
+
+
+require 'bundler/gem_tasks'
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+
+task default: :test

data/lib/devise/uncommon_password/model.rb

@@ -0,0 +1,36 @@
+module Devise
+  module Models
+    # The UncommonPassword module adds a new validation for Devise Models.
+    # No modifications to routes or controllers needed.
+    # Simply add :uncommon_password to the list of included modules in your
+    # devise module, and all new registrations will be blocked if they use
+    # a common password.
+    module UncommonPassword
+      extend ActiveSupport::Concern
+      # Returns a list of the 100 most common passwords.
+      def self.common_passwords
+        passwords_file = File.join(File.dirname(__FILE__), "passwords.txt")
+
+        passwords = []
+        File.open(passwords_file, "r") do |file|
+          file.each do |password|
+            passwords << password.chomp
+          end
+        end
+        passwords
+      end
+
+      included do
+        validate :not_common_password
+      end
+
+      private
+
+      def not_common_password
+        if Devise::Models::UncommonPassword.common_passwords.include? password.downcase
+          errors.add(:password, "is one of the 100 most common passwords. Please choose something harder to guess.")
+        end
+      end
+    end
+  end
+end

data/lib/devise/uncommon_password/passwords.txt

@@ -0,0 +1,100 @@
+password
+12345678
+baseball
+football
+jennifer
+superman
+trustno1
+michelle
+sunshine
+123456789
+starwars
+computer
+corvette
+princess
+iloveyou
+maverick
+samantha
+steelers
+whatever
+hardcore
+internet
+mercedes
+bigdaddy
+midnight
+11111111
+marlboro
+victoria
+butthead
+startrek
+liverpoo
+danielle
+redskins
+mountain
+shithead
+xxxxxxxx
+88888888
+nicholas
+metallic
+qwertyui
+dolphins
+cocacola
+rush2112
+jonathan
+scorpion
+asdfasdf
+godzilla
+williams
+lifehack
+platinum
+garfield
+69696969
+jordan23
+bullshit
+airborne
+elephant
+explorer
+christin
+december
+benjamin
+dickhead
+brooklyn
+redwings
+michigan
+87654321
+guinness
+einstein
+snowball
+alexande
+passw0rd
+lasvegas
+slipknot
+kimberly
+1q2w3e4r
+carolina
+colorado
+creative
+bollocks
+darkness
+asdfghjk
+poohbear
+nintendo
+november
+password1
+lacrosse
+paradise
+maryjane
+spitfire
+anderson
+cherokee
+drowssap
+marshall
+1qaz2wsx
+caroline
+franklin
+snickers
+courtney
+westside
+patricia
+semperfi
+freeuser

data/lib/devise/uncommon_password/version.rb

@@ -0,0 +1,5 @@
+module Devise
+  module UncommonPassword
+    VERSION = '0.1.0'
+  end
+end

data/lib/devise/uncommon_password.rb

@@ -0,0 +1,9 @@
+require 'devise'
+require 'devise/uncommon_password/model'
+
+module Devise
+  module UncommonPassword
+  end
+end
+
+Devise.add_module :uncommon_password, model: "devise_uncommon_password/model"

data/lib/tasks/devise/uncommon_password_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :devise_uncommon_password do
+#   # Task goes here
+# end

metadata

@@ -0,0 +1,106 @@
+--- !ruby/object:Gem::Specification
+name: devise-uncommon_password
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Chris Larsen
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-07-06 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '4.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '4.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5.2'
+- !ruby/object:Gem::Dependency
+  name: devise
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.4'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Devise extension to prevent user from using a common password.
+email:
+- clarsenipod@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- README.md
+- Rakefile
+- lib/devise/uncommon_password.rb
+- lib/devise/uncommon_password/model.rb
+- lib/devise/uncommon_password/passwords.txt
+- lib/devise/uncommon_password/version.rb
+- lib/tasks/devise/uncommon_password_tasks.rake
+homepage: https://github.com/HCLarsen/devise-uncommon_passwords
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5.1
+signing_key: 
+specification_version: 4
+summary: Devise extension to prevent user from using a common password.
+test_files: []