Sha256: b4da245fe12fa4110c172649ffb33e1475ef30870b7a332c210cf048987a1b09
Contents?: true
Size: 1.91 KB
Versions: 35
Compression:
Stored size: 1.91 KB
Contents
class PasswordIsStrongValidator < ActiveModel::EachValidator
COMMON_PASSWORDS = %w{
password pass root admin metasploit
msf 123456 qwerty abc123 letmein monkey link182 demo
changeme test1234 rapid7
}
def validate_each(record, attribute, value)
return if value.blank?
if is_simple?(value)
record.errors[attribute] << "must contain letters, numbers, and at least one special character"
end
if contains_username?(record.username, value)
record.errors[attribute] << "must not contain the username"
end
if is_common_password?(value)
record.errors[attribute] << "must not be a common password"
end
if contains_repetition?(value)
record.errors[attribute] << "must not be a predictable sequence of characters"
end
end
private
def is_simple?(password)
not (password =~ /[A-Za-z]/ and password =~ /[0-9]/ and password =~ /[\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x3a\x3b\x3c\x3d\x3e\x3f\x5b\x5c\x5d\x5e\x5f\x60\x7b\x7c\x7d\x7e]/)
end
def contains_username?(username, password)
password =~ /#{username}/i
end
def is_common_password?(password)
COMMON_PASSWORDS.each do |pw|
common_pw = [pw, pw + "!", pw + "1", pw + "12", pw + "123", pw + "1234"]
if common_pw.include?(password.downcase)
return true
end
end
false
end
def contains_repetition?(password)
# Password repetition (quite basic) -- no "aaaaaa" or "ababab" or "abcabc" or
# "abcdabcd" (but note that the user can use "aaaaaab" or something).
if password.scan(/./).uniq.size < 2
return true
end
if (password.size % 2 == 0) and (password.scan(/../).uniq.size < 2)
return true
end
if (password.size % 3 == 0) and (password.scan(/.../).uniq.size < 2)
return true
end
if (password.size % 4 == 0) and (password.scan(/..../).uniq.size < 2)
return true
end
false
end
end
Version data entries
35 entries across 35 versions & 1 rubygems