devise-pwned_password

devise-pwned_password copied to clipboard

Add template methods

5

flori

The pwned api documentation wants a more specific user agent. > Each request to the API must be accompanied by a user agent request header. Typically this should be the...

runephilosof-abtion

Add global enabled option so we can toggle it on and off for different tests

5

Resolves #30 (Also resolves/supersedes #27) Currently based on #29 but could be rebased. - [x] Add tests - [x] Update docs

TylerRick

The `pwned` gem dependency is not being updated to `2.1.0` because the requirement is set to `~>2.0.0` instead of `~>2.0`

jonathan-wondereur

Check if existing user has weak passwords and force password change

1

Hello, first of all thank you for you for this awesome gem! Let's suppose an old User was stored before devise-security gem was added to application Gemfile. An existing User...

scicco

I've just finished adding this gem into a project I am working on and mostly it's working great. However, I noticed that whenever I signed in, I would get validation...

aldent95

Rename ambiguous min_password_matches/min_password_matches_warn option to threshold… to match pwned gem

1

The `min_password_matches` option seems misnamed to me. Model validations are usually worded in a way that describes what is required for the user to be _valid_: - Look at the...

TylerRick

Consider using unpwn to reduce API calls

1

Consider using the unpwn gem to check passwords locally https://github.com/indirect/unpwn > Unpwn checks passwords locally against the top one million passwords, as provided by the nbp project. Then, it uses...

eliotsykes

See #26

TylerRick

#16 added this to docs: > By default the value set above is used to reject passwords and warn users. > Optionally, you can add the following snippet to `config/initializers/devise.rb`...

TylerRick