pwned_passwords 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 4dac3d97a7a71263f3e8b19a986f70270b1d47ba1a59d20394318acadb165165
+  data.tar.gz: c5767daa36156744b6251f10317cc7b4d8144d2fb2a0d377a631608165a770a6
+SHA512:
+  metadata.gz: cc29f435714b20a6ab129211da7487c2620346425d5066494cf8a0ff9365734d7de7d2894fb63e2970b87872b03c9c81e13016973a2a0a20dc47af9a1d105030
+  data.tar.gz: 1e830f4471b733aa42c911253d888cb3bfa53ecf21132e526a622e143ec9f89c149c390dd2f9f7b922032233c202450c2215b1fad8fa791e4a451ff4493dc28b

data/lib/pwned_passwords.rb

@@ -0,0 +1,33 @@
+require 'digest'
+require 'faraday'
+
+PWNED_PASSWORD_API = 'https://api.pwnedpasswords.com/range/'.freeze
+
+class PwnedPasswords
+  def self.check_password(password)
+    password_score = 0
+    hashed_password = Digest::SHA1.hexdigest password
+    hashed_password.upcase!
+    # get the first five characters
+    hashed_password_prefix = hashed_password[0,5]
+    hashed_password_suffix = hashed_password[5..-1]
+    query_url = "#{PWNED_PASSWORD_API}#{hashed_password_prefix}"
+    api_response = Faraday.get query_url
+    if api_response.body.length > 0
+      suffixes = api_response.body.split("\r\n")
+      suffixes.each do |line|
+        suffix,count = line.split(":")
+        if suffix == hashed_password_suffix
+          password_score = count.to_i
+        end
+      end
+    end
+    if password_score > 100
+      puts "This password has been detected in too many breaches"
+    elsif (password_score > 20 & password_score < 100)
+      puts "This password is not great. Consider changing it."
+    else
+      puts "This password is okay"
+    end
+  end
+end

metadata

@@ -0,0 +1,46 @@
+--- !ruby/object:Gem::Specification
+name: pwned_passwords
+version: !ruby/object:Gem::Version
+  version: 0.0.3
+platform: ruby
+authors:
+- Oliver Day
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-06-22 00:00:00.000000000 Z
+dependencies: []
+description: Checks against the Pwned Passwords API using the first five characters
+  of the SHA1 hash of a password to determine if it exists in previously disclosed
+  breaches.
+email: oday@vistahigherlearning.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/pwned_passwords.rb
+homepage: https://rubygems.org/gems/pwned_passwords
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.3
+signing_key: 
+specification_version: 4
+summary: Checks Pwned Passwords API for passwords disclosed in previous breaches.
+test_files: []