password_validator 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: cda75beac9799532ffe0e19bedab64dbd64cbafe
-  data.tar.gz: e5e954c4b62c6f788428204c374c0523a6ba79c4
+  metadata.gz: 67d52b7421abf276459e23cf901c256418103032
+  data.tar.gz: 0c9e521d4e00022de645216839e223ba004c4e0f
 SHA512:
-  metadata.gz: f7466a6f630999700f43b47978dfd8e0dfdad21de284c6e8bb181bc04c5e4758bc0565015e6cdfc41b76d6201d31461239831c1b262e87f9f8df432522a0bcf8
-  data.tar.gz: ad20ce569fdc893e48c4941f45ae32085e06f7d606db3e967f8dec1284d959da314e8eeeaf1124a3a465993475bd96fdeade4c18917ba86ab77b501362d6af81
+  metadata.gz: 20dc7b341ab2d361d2ac7d3973c54133d3658a180a37a4d9c8e2e2be85941bfbf06ed634d05ed245cfd037210366b3be736738fca425874f6ff655fda0598a0a
+  data.tar.gz: 141157b5e361c0dea91c595f3ebc80017249a3295b5a1b6241dacdb0e029f680c77f613775c2751e82814b62ab1625ccedd29ee0a293796ce113916a58a2383a

data/lib/password_validator.rb

@@ -0,0 +1,54 @@
+module ActiveModel
+  module Validations
+    class PasswordValidator < ActiveModel::Validator
+
+      # Using multiple validators for passwords sucks because either the user receives a flood of
+      # (often redundant) errors, or each validation must become conditional, which can get complex
+      # fairly quickly.
+      #
+      # This class attempts to perform validations in a specific order of importance and only displays
+      # the errors that are relevant.
+      #
+      # todo: add tests
+      # todo: add more options
+      # todo: check for password strength
+      # todo: use I18n for errors
+
+      def validate(record)
+        @password = record.try(:password)
+        @password_confirmation = record.try(:password_confirmation)
+
+        case
+        when blank?
+          record.errors.add(:password, "can't be blank") unless options[:allow_blank]
+        when too_short?
+          record.errors.add(:password, "must be a minimum of #{options[:min_length]} characters in length")
+        when too_common?
+          record.errors.add(:password, "is too common")
+        when not_confirmed?
+          record.errors.add(:password_confirmation, "doesn't match password")
+        end
+      end
+
+    private
+
+      def blank?
+        @password.blank?
+      end
+
+      def too_short?
+        options[:min_length] && @password.length < options[:min_length]
+      end
+
+      def too_common?
+        # todo: improve this
+        common_passwords = %w(password qwerty abc123 abcdef 123456 111111)
+        options[:common] && common_passwords.include?(@password)
+      end
+
+      def not_confirmed?
+        options[:confirmation] && @password_confirmation != @password
+      end
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: password_validator
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Chris Anthes
@@ -30,7 +30,8 @@ email:
 executables: []
 extensions: []
 extra_rdoc_files: []
-files: []
+files:
+- lib/password_validator.rb
 homepage: https://github.com/bloomdido/password_validator
 licenses:
 - MIT