1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
# frozen-string-literal: true
module Rodauth
Feature.define(:disallow_common_passwords, :DisallowCommonPasswords) do
depends :login_password_requirements_base
auth_value_method :most_common_passwords_file, File.expand_path('../../../../dict/top-10_000-passwords.txt', __FILE__)
translatable_method :password_is_one_of_the_most_common_message, "is one of the most common passwords"
auth_value_method :most_common_passwords, nil
auth_methods :password_one_of_most_common?
def password_meets_requirements?(password)
super && password_not_one_of_the_most_common?(password)
end
def post_configure
super
return if most_common_passwords || !most_common_passwords_file
require 'set'
most_common = Set.new(File.read(most_common_passwords_file).split("\n").each(&:freeze)).freeze
self.class.send(:define_method, :most_common_passwords){most_common}
end
def password_one_of_most_common?(password)
most_common_passwords.include?(password)
end
private
def password_not_one_of_the_most_common?(password)
return true unless password_one_of_most_common?(password)
set_password_requirement_error_message(:password_is_one_of_the_most_common, password_is_one_of_the_most_common_message)
false
end
end
end
|
