login_attack_report 0.0.6 → 0.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +30 -2
- data/lib/login_attack_report/frameworks/active_record/models/l_a_r_version.rb +7 -0
- data/lib/login_attack_report/frameworks/active_record.rb +1 -1
- data/lib/login_attack_report/{login_attack_report_version_concern.rb → l_a_r_version_concern.rb} +1 -1
- data/lib/login_attack_report/version.rb +1 -1
- data/lib/login_attack_report.rb +4 -0
- metadata +3 -3
- data/lib/login_attack_report/frameworks/active_record/models/login_attack_report_version.rb +0 -7
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 90ec651c4f9966ec8d80b445ec9399e5207df9c1
|
|
4
|
+
data.tar.gz: edfceae3bb150af2a6df7740444e0b0030276c88
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: a57479ad6632a67b8cdd40f69bd39ef9d6149dd838df8bfae447f65760ae289ebe35b863366c7502d1c25606bb9910f61f885d298c8a6d251aa74dfb5722ccee
|
|
7
|
+
data.tar.gz: c169bce692f47a0ed0cb27cfa398138a767746863fb8bf632b175cd46789234b6ad380b0ba676050488d02e2fb6428d83c76b89e72c60391b07f37d9a7eaacd9
|
data/README.md
CHANGED
|
@@ -1,12 +1,16 @@
|
|
|
1
1
|
# LoginAttackReport
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
攻撃性のあるログインを判定します。
|
|
4
4
|
|
|
5
5
|
## Installation
|
|
6
6
|
|
|
7
7
|
Add this line to your application's Gemfile:
|
|
8
|
+
'devise' and 'paper_trail' is required
|
|
8
9
|
|
|
9
10
|
```ruby
|
|
11
|
+
gem 'devise'
|
|
12
|
+
gem 'paper_trail'
|
|
13
|
+
|
|
10
14
|
gem 'login_attack_report'
|
|
11
15
|
```
|
|
12
16
|
|
|
@@ -18,9 +22,33 @@ Or install it yourself as:
|
|
|
18
22
|
|
|
19
23
|
$ gem install login_attack_report
|
|
20
24
|
|
|
25
|
+
## Configuring
|
|
26
|
+
|
|
27
|
+
/config/initializers/login_attack_report.rb
|
|
28
|
+
```ruby
|
|
29
|
+
LoginAttackReport.setup do |config|
|
|
30
|
+
# ログイン成功回数リミット
|
|
31
|
+
config.login_ok_limit = 200
|
|
32
|
+
# ログイン失敗回数リミット
|
|
33
|
+
config.login_ng_limit = 50
|
|
34
|
+
end
|
|
35
|
+
```
|
|
36
|
+
|
|
21
37
|
## Usage
|
|
22
38
|
|
|
23
|
-
|
|
39
|
+
モデル名をシンボルで渡すことで攻撃性のあるログインを判定します。
|
|
40
|
+
|
|
41
|
+
ログイン成功回数のlimitを超えたユーザを抽出します。
|
|
42
|
+
※ 異常に多い場合、どこかでID/パスワードが漏れている、もしくはIDが共有されている可能性あり
|
|
43
|
+
```ruby
|
|
44
|
+
LoginAttackReport::LARVersion.login_ok_limit_over(:User)
|
|
45
|
+
```
|
|
46
|
+
|
|
47
|
+
ログイン失敗回数のlimitを超えたユーザを抽出します。
|
|
48
|
+
※ 異常に多い場合、リスト型攻撃を受けている可能性あり
|
|
49
|
+
```ruby
|
|
50
|
+
LoginAttackReport::LARVersion.login_ng_limit_over(:User)
|
|
51
|
+
```
|
|
24
52
|
|
|
25
53
|
## Contributing
|
|
26
54
|
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
#Dir[File.join(File.dirname(__FILE__), 'active_record', 'models', 'login_attack_report', '*.rb')].each do |file|
|
|
2
2
|
# require "login_attack_report/frameworks/active_record/models/#{File.basename(file, '.rb')}"
|
|
3
3
|
#end
|
|
4
|
-
require "login_attack_report/frameworks/active_record/models/
|
|
4
|
+
require "login_attack_report/frameworks/active_record/models/l_a_r_version.rb"
|
data/lib/login_attack_report.rb
CHANGED
|
@@ -9,12 +9,16 @@ end
|
|
|
9
9
|
require 'login_attack_report/frameworks/active_record'
|
|
10
10
|
|
|
11
11
|
module LoginAttackReport
|
|
12
|
+
|
|
13
|
+
# login ok limit
|
|
12
14
|
mattr_accessor :login_ok_limit
|
|
13
15
|
@@login_ok_limit = 200
|
|
14
16
|
|
|
17
|
+
# login ng limit
|
|
15
18
|
mattr_accessor :login_ng_limit
|
|
16
19
|
@@login_ng_limit = 50
|
|
17
20
|
|
|
21
|
+
# config/initializers/login_attack_report.rb
|
|
18
22
|
def self.setup
|
|
19
23
|
yield self
|
|
20
24
|
end
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: login_attack_report
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.0.
|
|
4
|
+
version: 0.0.7
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- taru m
|
|
@@ -176,8 +176,8 @@ files:
|
|
|
176
176
|
- Rakefile
|
|
177
177
|
- lib/login_attack_report.rb
|
|
178
178
|
- lib/login_attack_report/frameworks/active_record.rb
|
|
179
|
-
- lib/login_attack_report/frameworks/active_record/models/
|
|
180
|
-
- lib/login_attack_report/
|
|
179
|
+
- lib/login_attack_report/frameworks/active_record/models/l_a_r_version.rb
|
|
180
|
+
- lib/login_attack_report/l_a_r_version_concern.rb
|
|
181
181
|
- lib/login_attack_report/version.rb
|
|
182
182
|
- login_attack_report.gemspec
|
|
183
183
|
- spec/login_attack_report_spec.rb
|