Class: PwnedPasswords

Inherits:
Object
  • Object
show all
Defined in:
lib/pwned_passwords.rb

Class Method Summary collapse

Class Method Details

.check_password(password) ⇒ Object 



7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
 
# File 'lib/pwned_passwords.rb', line 7

def self.check_password(password)
  password_score = 0
  hashed_password = Digest::SHA1.hexdigest password
  hashed_password.upcase!
  # get the first five characters
  hashed_password_prefix = hashed_password[0,5]
  hashed_password_suffix = hashed_password[5..-1]
  query_url = "#{PWNED_PASSWORD_API}#{hashed_password_prefix}"
  api_response = Faraday.get query_url
  if api_response.body.length > 0
    suffixes = api_response.body.split("\r\n")
    suffixes.each do |line|
      suffix,count = line.split(":")
      if suffix == hashed_password_suffix
        password_score = count.to_i
      end
    end
  end
  if password_score > 100
    puts "This password has been detected in too many breaches"
  elsif (password_score > 20 && password_score < 100)
    puts "This password is not great. Consider changing it."
  else
    puts "This password is okay"
  end
end