Devise::PwnedPassword is a Devise extension that checks user passwords against
the PwnedPasswords dataset.
It checks for compromised ("pwned") passwords in 2 different places/ways:
- As a standard model validation using pwned. This:
- prevents new users from being created (signing up) with a compromised
password
- prevents existing users from changing their password to a password that is
known to be compromised
- (Optionally) Whenever a user signs in, checks if their current password is
compromised and shows a warning if it is.
21 lines
497 B
Makefile
21 lines
497 B
Makefile
PORTNAME= devise-pwned_password
|
|
PORTVERSION= 0.1.12
|
|
CATEGORIES= devel rubygems
|
|
MASTER_SITES= RG
|
|
|
|
MAINTAINER= sunpoet@FreeBSD.org
|
|
COMMENT= Devise extension that checks user passwords against the PwnedPasswords dataset
|
|
WWW= https://github.com/michaelbanfield/devise-pwned_password
|
|
|
|
LICENSE= MIT
|
|
LICENSE_FILE= ${WRKSRC}/MIT-LICENSE
|
|
|
|
RUN_DEPENDS= rubygem-devise-rails71>=0:devel/rubygem-devise-rails71 \
|
|
rubygem-pwned>=2.4<3:security/rubygem-pwned
|
|
|
|
USES= gem
|
|
|
|
NO_ARCH= yes
|
|
|
|
.include <bsd.port.mk>
|