aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPo-Chuan Hsieh <sunpoet@FreeBSD.org>2024-05-16 06:13:39 +0000
committerPo-Chuan Hsieh <sunpoet@FreeBSD.org>2024-05-16 06:21:49 +0000
commit24bd1fcf60c1c5a34d846371c876094565b57409 (patch)
tree7a38c9c4d5ecbbd8bb78f11eb17ae3741a3cdfdc
parentf11642d0b116a07a550d7f9dc135332967b2dc67 (diff)
devel/rubygem-devise-pwned_password: Add rubygem-devise-pwned_password 0.1.12
Devise::PwnedPassword is a Devise extension that checks user passwords against the PwnedPasswords dataset. It checks for compromised ("pwned") passwords in 2 different places/ways: - As a standard model validation using pwned. This: - prevents new users from being created (signing up) with a compromised password - prevents existing users from changing their password to a password that is known to be compromised - (Optionally) Whenever a user signs in, checks if their current password is compromised and shows a warning if it is.
-rw-r--r--devel/Makefile1
-rw-r--r--devel/rubygem-devise-pwned_password/Makefile20
-rw-r--r--devel/rubygem-devise-pwned_password/distinfo3
-rw-r--r--devel/rubygem-devise-pwned_password/pkg-descr11
4 files changed, 35 insertions, 0 deletions
diff --git a/devel/Makefile b/devel/Makefile
index 340d9dd40643..7435321cf3f5 100644
--- a/devel/Makefile
+++ b/devel/Makefile
@@ -6899,6 +6899,7 @@
SUBDIR += rubygem-descendants_tracker
SUBDIR += rubygem-device_detector
SUBDIR += rubygem-devise
+ SUBDIR += rubygem-devise-pwned_password
SUBDIR += rubygem-devise-rails5
SUBDIR += rubygem-devise-rails52
SUBDIR += rubygem-devise-rails60
diff --git a/devel/rubygem-devise-pwned_password/Makefile b/devel/rubygem-devise-pwned_password/Makefile
new file mode 100644
index 000000000000..4f616fdf3932
--- /dev/null
+++ b/devel/rubygem-devise-pwned_password/Makefile
@@ -0,0 +1,20 @@
+PORTNAME= devise-pwned_password
+PORTVERSION= 0.1.12
+CATEGORIES= devel rubygems
+MASTER_SITES= RG
+
+MAINTAINER= sunpoet@FreeBSD.org
+COMMENT= Devise extension that checks user passwords against the PwnedPasswords dataset
+WWW= https://github.com/michaelbanfield/devise-pwned_password
+
+LICENSE= MIT
+LICENSE_FILE= ${WRKSRC}/MIT-LICENSE
+
+RUN_DEPENDS= rubygem-devise-rails71>=0:devel/rubygem-devise-rails71 \
+ rubygem-pwned>=2.4<3:security/rubygem-pwned
+
+USES= gem
+
+NO_ARCH= yes
+
+.include <bsd.port.mk>
diff --git a/devel/rubygem-devise-pwned_password/distinfo b/devel/rubygem-devise-pwned_password/distinfo
new file mode 100644
index 000000000000..dfaa5647401b
--- /dev/null
+++ b/devel/rubygem-devise-pwned_password/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1714227806
+SHA256 (rubygem/devise-pwned_password-0.1.12.gem) = 876452466634560a79910a1f22ef467f656e95e746c77d8266d70345b2279672
+SIZE (rubygem/devise-pwned_password-0.1.12.gem) = 9216
diff --git a/devel/rubygem-devise-pwned_password/pkg-descr b/devel/rubygem-devise-pwned_password/pkg-descr
new file mode 100644
index 000000000000..5483f61caeea
--- /dev/null
+++ b/devel/rubygem-devise-pwned_password/pkg-descr
@@ -0,0 +1,11 @@
+Devise::PwnedPassword is a Devise extension that checks user passwords against
+the PwnedPasswords dataset.
+
+It checks for compromised ("pwned") passwords in 2 different places/ways:
+- As a standard model validation using pwned. This:
+ - prevents new users from being created (signing up) with a compromised
+ password
+ - prevents existing users from changing their password to a password that is
+ known to be compromised
+- (Optionally) Whenever a user signs in, checks if their current password is
+ compromised and shows a warning if it is.