devise_zxcvbn 5.2.0 → 6.0.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/workflows/gem-push.yml +0 -2
- data/CHANGELOG.md +8 -0
- data/README.md +1 -1
- data/devise_zxcvbn.gemspec +1 -1
- data/lib/devise_zxcvbn/version.rb +1 -1
- metadata +5 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: d9199b7dc373b012f84a98f47e9c70ebc0e229a7749d70c1d72c73aef57f4b81
|
|
4
|
+
data.tar.gz: 9b914ad4c1fefca97261f09625ca4ec891a46808bbcaf24ae83bb9b5a848f5e5
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 0645cd5046baf76e3f88f2ca2d60c67823b083a2cc38c17d31c674d2e77578a807cdc810fcb7d8ce7f7d73b3df644ec679a4a1d5676d86f3a751cf79a8351c3a
|
|
7
|
+
data.tar.gz: 662aec05fc6ff3349cd75b1b63361f61add2eba284454a9c0f75d27d14e9bf7b984665375fc51eb7a1a956a32c05a1cf0a88a25f9a654c19704b488b928b8c58
|
data/CHANGELOG.md
ADDED
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
## 6.0 - 2021-12-17
|
|
2
|
+
|
|
3
|
+
- Switching to [zxcvbn-rb](https://github.com/formigarafa/zxcvbn-rb) so that we do not need to run execjs but still keep compatability with Dropbox's zxcvbn.js.
|
|
4
|
+
`zxcvbn-rb` is not the same as `zxcvbn-ruby` (which produces different scores which is why we originally used `zxcvbn-js`).
|
|
5
|
+
|
|
6
|
+
## 5.2 - 2021-12-17
|
|
7
|
+
|
|
8
|
+
- Fix Ruby 3.0 compatability
|
data/README.md
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
[](https://github.com/bitzesty/devise_zxcvbn/actions/workflows/ruby.yml)
|
|
5
5
|
[](https://codeclimate.com/github/bitzesty/devise_zxcvbn)
|
|
6
6
|
|
|
7
|
-
Plugin for [devise](https://github.com/plataformatec/devise) to reject weak passwords, using [zxcvbn-
|
|
7
|
+
Plugin for [devise](https://github.com/plataformatec/devise) to reject weak passwords, using [zxcvbn-rb](https://github.com/formigarafa/zxcvbn-rb) which is a ruby port of [zxcvbn: realistic password strength estimation](https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/).
|
|
8
8
|
|
|
9
9
|
The user's password will be rejected if the score is below 4 by default. It also uses the email as user input to zxcvbn, to reject passwords containing parts of the email (if using zxcvbn.js on the frontend you should also do this to get the same score).
|
|
10
10
|
|
data/devise_zxcvbn.gemspec
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: devise_zxcvbn
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version:
|
|
4
|
+
version: 6.0.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Bit Zesty
|
|
@@ -109,19 +109,19 @@ dependencies:
|
|
|
109
109
|
- !ruby/object:Gem::Version
|
|
110
110
|
version: '0'
|
|
111
111
|
- !ruby/object:Gem::Dependency
|
|
112
|
-
name: zxcvbn
|
|
112
|
+
name: zxcvbn
|
|
113
113
|
requirement: !ruby/object:Gem::Requirement
|
|
114
114
|
requirements:
|
|
115
115
|
- - "~>"
|
|
116
116
|
- !ruby/object:Gem::Version
|
|
117
|
-
version:
|
|
117
|
+
version: 0.1.7
|
|
118
118
|
type: :runtime
|
|
119
119
|
prerelease: false
|
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
|
121
121
|
requirements:
|
|
122
122
|
- - "~>"
|
|
123
123
|
- !ruby/object:Gem::Version
|
|
124
|
-
version:
|
|
124
|
+
version: 0.1.7
|
|
125
125
|
description: 'This gems works with devise to provide backend password strength checking
|
|
126
126
|
via zxcvbn-js to reject weak passwords '
|
|
127
127
|
email:
|
|
@@ -134,6 +134,7 @@ files:
|
|
|
134
134
|
- ".github/workflows/ruby.yml"
|
|
135
135
|
- ".gitignore"
|
|
136
136
|
- ".rspec"
|
|
137
|
+
- CHANGELOG.md
|
|
137
138
|
- Gemfile
|
|
138
139
|
- LICENSE.txt
|
|
139
140
|
- README.md
|