1
0
Fork 0
mirror of https://github.com/Luzifer/password.git synced 2024-11-08 17:30:10 +00:00
password/main.go
Knut Ahlers c034fcf285 Fix: Ensured minimal length of passwords
This is to prevent a endless loop when generating passwords with 1 or 2 characters. As they are not able to meet the minimal requirements they will get rejected by the security check and the generator will loop forever consuming 100% CPU at each process.
2015-05-03 01:05:30 +02:00

91 lines
1.9 KiB
Go

package main
import (
"fmt"
"net/http"
"os"
"strconv"
"github.com/Luzifer/password/lib"
"github.com/codegangsta/cli"
"github.com/gorilla/mux"
)
var pwd *securepassword.SecurePassword
func init() {
pwd = securepassword.NewSecurePassword()
}
func main() {
app := cli.NewApp()
app.Usage = "generates secure random passwords"
app.Version = "1.0.0"
app.Commands = []cli.Command{
{
Name: "serve",
Usage: "start an API server to request passwords",
Action: startAPIServer,
Flags: []cli.Flag{
cli.IntFlag{
Name: "port",
Value: 3000,
Usage: "port to listen on",
},
},
},
{
Name: "get",
Usage: "generate and return a secure random password",
Action: printPassword,
Flags: []cli.Flag{
cli.IntFlag{
Name: "length, l",
Value: 20,
Usage: "length of the generated password",
},
cli.BoolFlag{
Name: "special, s",
Usage: "use special characters in your password",
},
},
},
}
app.Run(os.Args)
}
func startAPIServer(c *cli.Context) {
r := mux.NewRouter()
r.HandleFunc("/v1/getPassword", handleAPIGetPasswordv1).Methods("GET")
http.Handle("/", r)
http.ListenAndServe(fmt.Sprintf(":%d", c.Int("port")), nil)
}
func printPassword(c *cli.Context) {
if c.Int("length") < 5 {
fmt.Println("Passwords with fewer than 5 characters are too insecure.")
os.Exit(1)
}
fmt.Println(pwd.GeneratePassword(c.Int("length"), c.Bool("special")))
}
func handleAPIGetPasswordv1(res http.ResponseWriter, r *http.Request) {
length, err := strconv.Atoi(r.URL.Query().Get("length"))
if err != nil {
length = 20
}
special := r.URL.Query().Get("special") == "true"
if length > 128 || length < 5 {
http.Error(res, "Please do not use length with more than 128 or fewer than 5 characters!", http.StatusNotAcceptable)
return
}
res.Header().Add("Content-Type", "text/plain")
res.Header().Add("Cache-Control", "no-cache")
res.Write([]byte(pwd.GeneratePassword(length, special)))
}