hibp_check 0.1.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b8ba3c79b7ed520b70207d01e5b72f9c2c60b0b7b299a2a4acb4408e98d175e8
+  data.tar.gz: b0f7e5beea10918568285237097c840b079db12b38baa5f8fa6940a1a84fb586
+SHA512:
+  metadata.gz: 3a23e3173e12a5a89e0b8e96935dc6588e63f8fb48f6bd28066abaaa7c938bf89891a1db51e4c729b2a1efcc9bea56f5518cf846befdc086dfd2e7a79fff015a
+  data.tar.gz: 0061c40d8646e2891270cf6f5fe2b4dc4f1e99694b32b7c8822301409dc989a03b28a65118f0af2bb25d9ba27b2a63cc43c031a4737b294d123239d94f5b3aec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2018 John Ash
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/hibp_check.gemspec

@@ -0,0 +1,33 @@
+lib = File.expand_path("../lib", __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "hibp_check/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "hibp_check"
+  spec.version       = HibpCheck::VERSION
+  spec.authors       = ["John Ash"]
+  spec.email         = ["john.ash@k3integrations.com"]
+
+  spec.summary       = %q{Check passwords against API of compromised passwords}
+  spec.description   = %q{Check passwords against API of compromised passwords}
+  spec.homepage      = "https://github.com/k3integrations/hibp_check"
+  spec.license       = "MIT"
+
+  # Specify which files should be added to the gem when it is released.
+  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
+    [
+      'LICENSE.txt',
+      'hibp_check.gemspec',
+      'lib/hibp_check.rb',
+      'lib/hibp_check/version.rb'
+    ]
+  end
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "bundler", "~> 1.16"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec", "~> 3.0"
+  spec.add_development_dependency "vcr", "~> 4.0"
+  spec.add_development_dependency "webmock", "~> 3.5"
+end

data/lib/hibp_check.rb

@@ -0,0 +1,49 @@
+require 'resolv-replace' # Use better DNS resolver
+require 'net/http'
+require 'uri'
+require 'digest'
+
+class HibpCheck
+  API_URL = 'https://api.pwnedpasswords.com/range/'
+
+  attr_reader :prefix, :remainder, :hashes, :params, :request, :response
+
+  def initialize(params={})
+    @params = params
+  end
+
+  def password_used(password)
+    return nil if password.nil?
+    sha1_used Digest::SHA1.hexdigest(password.to_s)
+  end
+
+  def sha1_used(hashed)
+    return nil unless hashed =~ /^[0-9a-f]{40}$/i
+    @prefix = hashed.slice(0..4).upcase
+    @remainder = hashed.slice(5..-1).upcase
+    @hashes = fetch_hashes_by_prefix prefix
+    if hashes
+      return $1.to_i if hashes.match(/#{remainder}:(\d+)/)
+      return 0
+    end
+    nil
+  end
+
+  private
+
+  def fetch_hashes_by_prefix(prefix)
+    fetch "#{API_URL}#{prefix}"
+    return response.body if response.code == "200"
+    nil
+  end
+
+  def fetch(url)
+    uri = URI(url)
+
+    Net::HTTP.start(uri.host, uri.port, params.merge(use_ssl: uri.scheme=='https')) do |http|
+      @request = Net::HTTP::Get.new uri
+
+      @response = http.request @request # Net::HTTPResponse object
+    end
+  end
+end

data/lib/hibp_check/version.rb

@@ -0,0 +1,3 @@
+class HibpCheck
+  VERSION = "0.1.1"
+end

metadata

@@ -0,0 +1,118 @@
+--- !ruby/object:Gem::Specification
+name: hibp_check
+version: !ruby/object:Gem::Version
+  version: 0.1.1
+platform: ruby
+authors:
+- John Ash
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-12-31 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
+description: Check passwords against API of compromised passwords
+email:
+- john.ash@k3integrations.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE.txt
+- hibp_check.gemspec
+- lib/hibp_check.rb
+- lib/hibp_check/version.rb
+homepage: https://github.com/k3integrations/hibp_check
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.7
+signing_key: 
+specification_version: 4
+summary: Check passwords against API of compromised passwords
+test_files: []