-
Notifications
You must be signed in to change notification settings - Fork 12
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* take an arg and notify server is running * fixes dockerfile * gank code from deprecated hibp module * unexport functions and struct
- Loading branch information
1 parent
86c7909
commit f5e3696
Showing
5 changed files
with
131 additions
and
26 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,11 +1,11 @@ | ||
| FROM golang:1.15 | ||
|
|
||
| WORKDIR /app | ||
| COPY go.* . | ||
| COPY go.* ./ | ||
| RUN go mod download | ||
|
|
||
| COPY . . | ||
| CMD ["go", "run", "main.go"] | ||
|
|
||
| # $ docker build -t passdb-server . | ||
| # $ docker run --env-file .env passdb-server | ||
| # $ docker run --env-file .env -p 3000:3000 passdb-server |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,102 @@ | ||
| package hibp | ||
|
|
||
| import ( | ||
| "encoding/json" | ||
| "errors" | ||
| "io/ioutil" | ||
| "net/http" | ||
| "net/url" | ||
| "os" | ||
| ) | ||
|
|
||
| //API URL of haveibeenpwned.com | ||
| const API = "https://haveibeenpwned.com/api/v3/" | ||
|
|
||
| //BreachModel Each breach contains a number of attributes describing the incident. In the future, these attributes may expand without the API being versioned. | ||
| type BreachModel struct { | ||
| Name string `json:"Name,omitempty"` | ||
| Title string `json:"Title,omitempty"` | ||
| Domain string `json:"Domain,omitempty"` | ||
| BreachDate string `json:"BreachDate,omitempty"` | ||
| AddedDate string `json:"AddedDate,omitempty"` | ||
| ModifiedDate string `json:"ModifiedDate,omitempty"` | ||
| PwnCount int `json:"PwnCount,omitempty"` | ||
| Description string `json:"Description,omitempty"` | ||
| DataClasses []string `json:"DataClasses,omitempty"` | ||
| IsVerified bool `json:"IsVerified,omitempty"` | ||
| IsFabricated bool `json:"IsFabricated,omitempty"` | ||
| IsSensitive bool `json:"IsSensitive,omitempty"` | ||
| IsRetired bool `json:"IsRetired,omitempty"` | ||
| IsSpamList bool `json:"IsSpamList,omitempty"` | ||
| LogoPath string `json:"LogoPath,omitempty"` | ||
| } | ||
|
|
||
| //BreachedAccount The most common use of the API is to return a list of all breaches a particular account has been involved in. The API takes a single parameter which is the account to be searched for. The account is not case sensitive and will be trimmed of leading or trailing white spaces. The account should always be URL encoded. | ||
| func BreachedAccount(account, domainFilter string, truncate, unverified bool) ([]BreachModel, error) { | ||
|
|
||
| res, err := callService("breachedaccount", account, domainFilter, truncate, unverified) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| if res.StatusCode == http.StatusNotFound { | ||
| return nil, nil | ||
| } | ||
|
|
||
| body, err := ioutil.ReadAll(res.Body) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| defer res.Body.Close() | ||
|
|
||
| breaches := make([]BreachModel, 0) | ||
| if err := json.Unmarshal(body, &breaches); err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return breaches, nil | ||
| } | ||
|
|
||
| func callService(service, account, domainFilter string, truncate, unverified bool) (*http.Response, error) { | ||
| client := &http.Client{} | ||
|
|
||
| u, err := url.Parse(API) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| u.Path += service + "/" + account | ||
| parameters := url.Values{} | ||
| if domainFilter != "" { | ||
| parameters.Add("domain", domainFilter) | ||
| } | ||
| if truncate == false { | ||
| parameters.Add("truncateResponse", "false") | ||
| } | ||
| if unverified { | ||
| parameters.Add("includeUnverified", "true") | ||
| } | ||
| u.RawQuery = parameters.Encode() | ||
|
|
||
| req, err := http.NewRequest("GET", u.String(), nil) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| req.Header.Set("User-Agent", "Go/1.15") | ||
| req.Header.Set("hibp-api-key", os.Getenv("HIBP_API_KEY")) | ||
| res, err := client.Do(req) | ||
|
|
||
| switch res.StatusCode { | ||
| case http.StatusBadRequest: | ||
| return nil, errors.New("the account does not comply with an acceptable format") | ||
| case http.StatusTooManyRequests: | ||
| return nil, errors.New("too many requests — the rate limit has been exceeded") | ||
| case http.StatusUnauthorized: | ||
| return nil, errors.New("valid header `hibp-api-key` required") | ||
| } | ||
|
|
||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| return res, nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters