rodauth-pwned 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fd0ad8ce7b86521b47c5d4ed6c1986210ba2962651ebf0689de230c2ce177e33
-  data.tar.gz: 4561058c9852a558be78f3c1584b72c96656925fcb91b7a8963d2282445a852b
+  metadata.gz: f8921aa5a7a7a2f911b9fdaaee2f6cccd1d49039b090da52731fd21efd0884fc
+  data.tar.gz: 9b0e6764b69097674e3e8335b809b0d85009dbd567ebc1a23e61d2ee15cf84fb
 SHA512:
-  metadata.gz: b7d5a4f4a155fcd78871ea41851727b6243a4fd8d5b56453296ae724c150969363d0b20f9a01182541b317ef7cce3e9e5cb0d27879eb974910d5fea4ffb736a7
-  data.tar.gz: 207219558e027c559910cba8a662940eee39cbb8c6ce12e2a0d9f06c1c63cca4b9a2415c517f8faff2ea4bd702aedcacb881303371e90f4f33a1e7fd5d8d07c6
+  metadata.gz: 66c1002236eaa8f9c7343b9220f68b2acb88d904da22a1ba859e7a82795943c64491e7bd50c2f0f036dead9f66cf6618925fc07511cbeba3ad73e4961905689b
+  data.tar.gz: '0860965d7cd51ac38441ff338b3db9e78228746dd2e991e4b5c03514cd83729137a59274a03524d0b597e562479ee631ecf1dda8c926bc997d808b255ba6fbd0'

data/README.md

@@ -1,6 +1,7 @@
 # rodauth-pwned
 
-[Rodauth] feature that checks user passwords against the [Pwned Passwords API].
+[Rodauth] feature that checks user passwords against the [Pwned Passwords API]
+(using the [Pwned] rubygem).
 
 ## Installation
 
@@ -88,6 +89,23 @@ plugin :rodauth do
 end
 ```
 
+### Warning users with pwned passwords
+
+If a user's password becomes pwned, you may want to warn them on login:
+
+```rb
+plugin :rodauth do
+  # ...
+  after_login do
+    db.after_commit do # better to make HTTP requests outside of transactions
+      if param_or_nil(password_param) && password_pwned?(param(password_param))
+        set_redirect_error_flash "Your password has previously appeared in a data breach and should never be used. We strongly recommend you change your password."
+      end
+    end
+  end
+end
+```
+
 ## Development
 
 Run tests with Rake:
@@ -96,9 +114,9 @@ Run tests with Rake:
 $ bundle exec rake test
 ```
 
-## Contributing
+## Credits
 
-Bug reports and pull requests are welcome on GitHub at https://github.com/janko/rodauth-pwned. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [code of conduct](https://github.com/janko/rodauth-pwned/blob/master/CODE_OF_CONDUCT.md).
+This gem has been inspired by [devise-pwned_password].
 
 ## License
 
@@ -111,3 +129,4 @@ Everyone interacting in the Rodauth::Pwned project's codebases, issue trackers,
 [Rodauth]: https://github.com/jeremyevans/rodauth
 [Pwned Passwords API]: https://haveibeenpwned.com/Passwords
 [Pwned]: https://github.com/philnash/pwned
+[devise-pwned_password]: https://github.com/michaelbanfield/devise-pwned_password

data/lib/rodauth/features/pwned_password.rb

@@ -31,6 +31,11 @@ module Rodauth
       Pwned.pwned_count(password, pwned_request_options)
     end
 
+    def post_configure
+      super
+      i18n_register File.expand_path("#{__dir__}/../../../locales") if features.include?(:i18n)
+    end
+
     private
 
     def password_not_pwned?(password)

data/rodauth-pwned.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = "rodauth-pwned"
-  spec.version       = "0.1.0"
+  spec.version       = "0.2.0"
   spec.authors       = ["Janko Marohnić"]
   spec.email         = ["janko.marohnic@gmail.com"]
 
@@ -25,4 +25,5 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "tilt"
   spec.add_development_dependency "bcrypt"
   spec.add_development_dependency "capybara"
+  spec.add_development_dependency "rodauth-i18n"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rodauth-pwned
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Janko Marohnić
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-08-23 00:00:00.000000000 Z
+date: 2023-03-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rodauth
@@ -108,6 +108,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rodauth-i18n
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Rodauth extension for checking whether a password had been exposed in
   a database breach according to https://haveibeenpwned.com.
 email:
@@ -126,7 +140,7 @@ licenses:
 metadata:
   homepage_uri: https://github.com/janko/rodauth-pwned
   source_code_uri: https://github.com/janko/rodauth-pwned
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -141,8 +155,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.1
-signing_key: 
+rubygems_version: 3.4.7
+signing_key:
 specification_version: 4
 summary: Rodauth extension for checking whether a password had been exposed in a database
   breach according to https://haveibeenpwned.com.