password_strength 0.3.2 → 0.4.0

data/test/password_strength_test.rb

@@ -1,3 +1,4 @@
+# -*- encoding: utf-8 -*-
 require "test_helper"
 
 class TestPasswordStrength < Test::Unit::TestCase
@@ -17,16 +18,16 @@ class TestPasswordStrength < Test::Unit::TestCase
     @strength.instance_variable_set("@status", :good)
     assert @strength.good?
     assert @strength.valid?(:good)
-    assert_equal false, @strength.weak?
-    assert_equal false, @strength.strong?
+    refute @strength.weak?
+    refute @strength.strong?
   end
 
   def test_weak_strength
     @strength.instance_variable_set("@status", :weak)
     assert @strength.weak?
     assert @strength.valid?(:weak)
-    assert_equal false, @strength.good?
-    assert_equal false, @strength.strong?
+    refute @strength.good?
+    refute @strength.strong?
   end
 
   def test_strong_strength
@@ -34,8 +35,8 @@ class TestPasswordStrength < Test::Unit::TestCase
     assert @strength.strong?
     assert @strength.valid?(:strong)
     assert @strength.valid?(:good)
-    assert_equal false, @strength.good?
-    assert_equal false, @strength.weak?
+    refute @strength.good?
+    refute @strength.weak?
   end
 
   def test_short_password
@@ -63,7 +64,7 @@ class TestPasswordStrength < Test::Unit::TestCase
   end
 
   def test_weak_password
-    @strength.password = "1234567890"
+    @strength.password = "ytrewq"
     @strength.test
     assert_equal :weak, @strength.status
 
@@ -228,13 +229,24 @@ class TestPasswordStrength < Test::Unit::TestCase
     @strength = PasswordStrength.test("johndoe", "^Str0ng P4ssw0rd$", :exclude => /\s/)
     assert_equal :invalid, @strength.status
     assert @strength.invalid?
-    assert_equal false, @strength.valid?
+    refute @strength.valid?
   end
 
   def test_exclude_option_as_array
     @strength = PasswordStrength.test("johndoe", "asdfasdfasdf", :exclude => ["asdf", "123"])
     assert_equal :invalid, @strength.status
     assert @strength.invalid?
-    assert_equal false, @strength.valid?
+    refute @strength.valid?
+  end
+
+  def test_loads_common_words
+    assert PasswordStrength::Base.common_words.size > 500
+  end
+
+  def test_reject_common_words
+    @strength = PasswordStrength.test("johndoe", PasswordStrength::Base.common_words.first)
+    assert_equal :invalid, @strength.status
+    assert @strength.invalid?
+    refute @strength.valid?
   end
 end

data/test/test_helper.rb

@@ -1,9 +1,10 @@
-$KCODE = "utf8" if RUBY_VERSION < "1.9"
-
+require "bundler/setup"
 require "test/unit"
 require "ostruct"
 require "active_record"
 
+I18n.enforce_available_locales = false
+
 Rails = OpenStruct.new(:version => ActiveRecord::VERSION::STRING)
 require "password_strength"
 

metadata

@@ -1,71 +1,131 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: password_strength
-version: !ruby/object:Gem::Version 
-  hash: 23
-  prerelease: false
-  segments: 
-  - 0
-  - 3
-  - 2
-  version: 0.3.2
+version: !ruby/object:Gem::Version
+  version: 0.4.0
 platform: ruby
-authors: 
+authors:
 - Nando Vieira
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2010-09-17 00:00:00 -03:00
-default_executable: 
-dependencies: 
-- !ruby/object:Gem::Dependency 
-  name: activesupport
-  prerelease: false
-  requirement: &id001 !ruby/object:Gem::Requirement 
-    none: false
-    requirements: 
+date: 2014-03-31 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: activerecord
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
     - - ">="
-      - !ruby/object:Gem::Version 
-        hash: 9
-        segments: 
-        - 2
-        - 3
-        - 5
-        version: 2.3.5
+      - !ruby/object:Gem::Version
+        version: '0'
   type: :runtime
-  version_requirements: *id001
-description: |
-  Validates the strength of a password according to several rules:
-  
-  * size
-  * 3+ numbers
-  * 2+ special characters
-  * uppercased and downcased letters
-  * combination of numbers, letters and symbols
-  * password contains username
-  * sequences (123, abc, aaa)
-
-email: fnando.vieira@gmail.com
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry-meta
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: test-unit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Check password strength against several rules. Includes ActiveRecord
+  support.
+email:
+- fnando.vieira@gmail.com
 executables: []
-
 extensions: []
-
-extra_rdoc_files: 
-- README.rdoc
-files: 
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".travis.yml"
 - CHANGELOG.rdoc
+- Gemfile
+- Gemfile.lock
 - README.rdoc
-- javascripts/jquery.strength.js
-- javascripts/password_strength.js
+- Rakefile
+- app/assets/javascripts/jquery_strength.js
+- app/assets/javascripts/password_strength.js
+- gemfiles/ar_3_2.gemfile
+- gemfiles/ar_4_0.gemfile
+- gemfiles/ar_4_1.gemfile
 - lib/password_strength.rb
 - lib/password_strength/active_record.rb
 - lib/password_strength/active_record/ar2.rb
 - lib/password_strength/active_record/ar3.rb
 - lib/password_strength/base.rb
+- lib/password_strength/engine.rb
 - lib/password_strength/validators/windows2008.rb
 - lib/password_strength/version.rb
 - locales/en.yml
 - locales/pt.yml
+- password_strength.gemspec
+- support/common.txt
 - test/active_record_test.rb
 - test/jquery-1.4.2.js
 - test/jquery_strength_test.html
@@ -79,42 +139,39 @@ files:
 - test/test_helper.rb
 - test/user.rb
 - test/validators/windows2008_test.rb
-has_rdoc: true
 homepage: http://github.com/fnando/password_strength
-licenses: []
-
+licenses:
+- MIT
+metadata: {}
 post_install_message: 
-rdoc_options: 
-- --charset=UTF-8
-require_paths: 
+rdoc_options: []
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
-  none: false
-  requirements: 
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
   - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
-  none: false
-  requirements: 
+    - !ruby/object:Gem::Version
+      version: '1.9'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
   - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-
 rubyforge_project: 
-rubygems_version: 1.3.7
+rubygems_version: 2.2.2
 signing_key: 
-specification_version: 3
+specification_version: 4
 summary: Check password strength against several rules. Includes ActiveRecord support.
-test_files: 
+test_files:
 - test/active_record_test.rb
+- test/jquery-1.4.2.js
+- test/jquery_strength_test.html
+- test/jquery_strength_test.js
+- test/jsunittest/jsunittest.js
+- test/jsunittest/unittest.css
+- test/password_strength_test.html
+- test/password_strength_test.js
 - test/password_strength_test.rb
 - test/schema.rb
 - test/test_helper.rb

data/javascripts/jquery.strength.js

@@ -1,62 +0,0 @@
-(function($){
-	$.strength = function(username, password, options, callback) {
-		if (typeof(options) == "function") {
-			callback = options;
-			options = {};
-		} else if (!options) {
-			options = {};
-		}
-
-		var usernameField = $(username);
-		var passwordField = $(password);
-		var strength = new PasswordStrength();
-
-		strength.exclude = options["exclude"];
-
-		callback = callback || $.strength.callback;
-
-		var handler = function(){
-			strength.username = $(usernameField).val();
-
-			if ($(usernameField).length == 0) {
-				strength.username = username;
-			}
-
-			strength.password = $(passwordField).val();
-
-			if ($(passwordField).length == 0) {
-				strength.password = password;
-			}
-
-			strength.test();
-			callback(usernameField, passwordField, strength);
-		};
-
-		$(usernameField).keydown(handler);
-		$(usernameField).keyup(handler);
-
-		$(passwordField).keydown(handler);
-		$(passwordField).keyup(handler);
-	};
-
-	$.extend($.strength, {
-		callback: function(username, password, strength){
-			var img = $(password).next("img.strength");
-
-			if (!img.length) {
-				$(password).after("<img class='strength'>");
-				img = $("img.strength");
-			}
-
-			$(img)
-				.removeClass("weak")
-				.removeClass("good")
-				.removeClass("strong")
-				.addClass(strength.status)
-				.attr("src", $.strength[strength.status + "Image"]);
-		},
-		weakImage: "/images/weak.png",
-		goodImage: "/images/good.png",
-		strongImage: "/images/strong.png"
-	});
-})(jQuery);

data/javascripts/password_strength.js

@@ -1,254 +0,0 @@
-var PasswordStrength = function() {
-	var MULTIPLE_NUMBERS_RE = /\d.*?\d.*?\d/;
-	var MULTIPLE_SYMBOLS_RE = /[!@#$%^&*?_~].*?[!@#$%^&*?_~]/;
-	var UPPERCASE_LOWERCASE_RE = /([a-z].*[A-Z])|([A-Z].*[a-z])/;
-	var SYMBOL_RE = /[!@#\$%^&*?_~]/;
-
-	this.username = null;
-	this.password = null;
-	this.score = 0;
-	this.status = null;
-
-	this.test = function() {
-		this.score = 0;
-
-		if (this.containInvalidMatches()) {
-			this.status = "invalid";
-		} else {
-			this.score += this.scoreFor("password_size");
-			this.score += this.scoreFor("numbers");
-			this.score += this.scoreFor("symbols");
-			this.score += this.scoreFor("uppercase_lowercase");
-			this.score += this.scoreFor("numbers_chars");
-			this.score += this.scoreFor("numbers_symbols");
-			this.score += this.scoreFor("symbols_chars");
-			this.score += this.scoreFor("only_chars");
-			this.score += this.scoreFor("only_numbers");
-			this.score += this.scoreFor("username");
-			this.score += this.scoreFor("sequences");
-			this.score += this.scoreFor("repetitions");
-
-			if (this.score < 0) {
-				this.score = 0;
-			}
-
-			if (this.score > 100) {
-				this.score = 100;
-			}
-
-			if (this.score < 35) {
-				this.status = "weak";
-			}
-
-			if (this.score >= 35 && this.score < 70) {
-				this.status = "good";
-			}
-
-			if (this.score >= 70) {
-				this.status = "strong";
-			}
-		}
-
-		return this.score;
-	};
-
-	this.scoreFor = function(name) {
-		score = 0;
-
-		switch (name) {
-			case "password_size":
-				if (this.password.length < 4) {
-					score = -100;
-				} else {
-					score = this.password.length * 4;
-				}
-				break;
-
-			case "numbers":
-				if (this.password.match(MULTIPLE_NUMBERS_RE)) {
-					score = 5;
-				}
-				break;
-
-			case "symbols":
-				if (this.password.match(MULTIPLE_SYMBOLS_RE)) {
-					score = 5;
-				}
-				break;
-
-			case "uppercase_lowercase":
-				if (this.password.match(UPPERCASE_LOWERCASE_RE)) {
-					score = 10;
-				}
-				break;
-
-			case "numbers_chars":
-				if (this.password.match(/[a-z]/i) && this.password.match(/[0-9]/)) {
-					score = 15;
-				}
-				break;
-
-			case "numbers_symbols":
-				if (this.password.match(/[0-9]/) && this.password.match(SYMBOL_RE)) {
-					score = 15;
-				}
-				break;
-
-			case "symbols_chars":
-				if (this.password.match(/[a-z]/i) && this.password.match(SYMBOL_RE)) {
-					score = 15;
-				}
-				break;
-
-			case "only_chars":
-				if (this.password.match(/^[a-z]+$/i)) {
-					score = -15;
-				}
-				break;
-
-			case "only_numbers":
-				if (this.password.match(/^\d+$/i)) {
-					score = -15;
-				}
-				break;
-
-			case "username":
-				if (this.password == this.username) {
-					score = -100;
-				} else if (this.password.indexOf(this.username) != -1) {
-					score = -15;
-				}
-				break;
-
-			case "sequences":
-				score += -15 * this.sequences(this.password);
-				score += -15 * this.sequences(this.reversed(this.password));
-				break;
-
-			case "repetitions":
-				score += -(this.repetitions(this.password, 2) * 4);
-        		score += -(this.repetitions(this.password, 3) * 3);
-        		score += -(this.repetitions(this.password, 4) * 2);
-				break;
-		};
-
-		return score;
-	};
-
-	this.isGood = function() {
-		return this.status == "good";
-	};
-
-	this.isWeak = function() {
-		return this.status == "weak";
-	};
-
-	this.isStrong = function() {
-		return this.status == "strong";
-	};
-
-	this.isInvalid = function() {
-	  return this.status == "invalid";
-	};
-
-	this.isValid = function(level) {
-		if(level == "strong") {
-			return this.isStrong();
-		} else if (level == "good") {
-			return this.isStrong() || this.isGood();
-		} else {
-			return !this.containInvalidMatches();
-		}
-	};
-
-	this.containInvalidMatches = function() {
-		if (!this.exclude) {
-			return false;
-		}
-
-		if (!this.exclude.test) {
-			return false;
-		}
-
-		return this.exclude.test(this.password.toString());
-	};
-
-	this.sequences = function(text) {
-		var matches = 0;
-		var sequenceSize = 0;
-		var codes = [];
-		var len = text.length;
-		var previousCode, currentCode;
-
-		for (var i = 0; i < len; i++) {
-			currentCode = text.charCodeAt(i);
-			previousCode = codes[codes.length - 1];
-			codes.push(currentCode);
-
-			if (previousCode) {
-				if (currentCode == previousCode + 1 || previousCode == currentCode) {
-					sequenceSize += 1;
-				} else {
-					sequenceSize = 0;
-				}
-			}
-
-			if (sequenceSize == 2) {
-				matches += 1;
-			}
-		}
-
-		return matches;
-	};
-
-	this.repetitions = function(text, size) {
-		var count = 0;
-  		var matches = {};
-		var len = text.length;
-		var substring;
-		var occurrences;
-		var tmpText;
-
-		for (var i = 0; i < len; i++) {
-			substring = text.substr(i, size);
-			occurrences = 0;
-			tmpText = text;
-
-			if (matches[substring] || substring.length < size) {
-				continue;
-			}
-
-			matches[substring] = true;
-
-			while ((i = tmpText.indexOf(substring)) != -1) {
-				occurrences += 1;
-				tmpText = tmpText.substr(i + 1);
-			};
-
-			if (occurrences > 1) {
-				count += 1;
-			}
-		}
-
-		return count;
-	};
-
-	this.reversed = function(text) {
-		var newText = "";
-		var len = text.length;
-
-		for (var i = len -1; i >= 0; i--) {
-			newText += text.charAt(i);
-		}
-
-		return newText;
-	};
-};
-
-PasswordStrength.test = function(username, password) {
-	strength = new PasswordStrength();
-	strength.username = username;
-	strength.password = password;
-	strength.test();
-	return strength;
-};