mirror of
https://github.com/luxfi/node.git
synced 2026-10-30 15:24:05 +00:00
zeekay
7cf87b230b
The module already called itself github.com/luxfi/node while containing no node in Go: cmd/luxd was twenty-one lines that printed the size of a few types, and the Go column of the matrix measured a VM plugin. A repo that fetches the thing it claims to be has not replaced it, so the Go sources move in — 1515 files, the daemon and everything under it — and the build reaches outside this module for nothing. Rust and C++ sit beside it unchanged and are still measured against it by the differential. That is the point of one repo: the reference implementation and the two ports are the same checkout, so parity is a thing you can run rather than a thing you assert. Verified: builds, and the closure carries no lux-private — checked at build time rather than believed. The daemon starts twelve chains on a local network (P X C Q Z A B G K M F, plus D through its plugin) and reports healthy.
69 lines
1.8 KiB
Go
69 lines
1.8 KiB
Go
// Copyright (C) 2019-2025, Lux Industries Inc. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
package password
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
|
|
"github.com/nbutton23/zxcvbn-go"
|
|
)
|
|
|
|
// Strength is the strength of a password
|
|
type Strength int
|
|
|
|
const (
|
|
// VeryWeak password
|
|
VeryWeak = 0
|
|
// Weak password
|
|
Weak = 1
|
|
// Fair password
|
|
Fair = 2
|
|
// Strong password
|
|
Strong = 3
|
|
// VeryStrong password
|
|
VeryStrong = 4
|
|
|
|
// OK password is the recommended minimum strength for API calls
|
|
OK = Fair
|
|
|
|
// maxPassLen is the maximum allowed password length
|
|
maxPassLen = 1024
|
|
|
|
// maxCheckedPassLen limits the length of the password that should be
|
|
// strength checked to avoid DoS.
|
|
maxCheckedPassLen = 50
|
|
)
|
|
|
|
var (
|
|
ErrEmptyPassword = errors.New("empty password")
|
|
ErrPassMaxLength = fmt.Errorf("password exceeds maximum length of %d chars", maxPassLen)
|
|
ErrWeakPassword = errors.New("password is too weak")
|
|
)
|
|
|
|
// SufficientlyStrong returns true if [password] has strength greater than or
|
|
// equal to [minimumStrength], scored by zxcvbn. This is the only
|
|
// implementation: a build tag must not decide how strong a password has to be.
|
|
func SufficientlyStrong(password string, minimumStrength Strength) bool {
|
|
if len(password) > maxCheckedPassLen {
|
|
password = password[:maxCheckedPassLen]
|
|
}
|
|
return zxcvbn.PasswordStrength(password, nil).Score >= int(minimumStrength)
|
|
}
|
|
|
|
// IsValid returns nil if [password] is a reasonable length and has strength
|
|
// greater than or equal to [minimumStrength]
|
|
func IsValid(password string, minimumStrength Strength) error {
|
|
switch {
|
|
case len(password) == 0:
|
|
return ErrEmptyPassword
|
|
case len(password) > maxPassLen:
|
|
return ErrPassMaxLength
|
|
case !SufficientlyStrong(password, minimumStrength):
|
|
return ErrWeakPassword
|
|
default:
|
|
return nil
|
|
}
|
|
}
|