Django-pwned - A collection of django password validators

Last update: Jun 27, 2022

Related tags

Django django-pwned

Overview

Django Pwned

A collection of django password validators.

Compatibility

Python: 3.6, 3.7, 3.8, 3.9, 3.10
Django: 3.2, 4.0

Installation

pip install django-pwned

For translations to work, add django_pwned to INSTALLED_APPS.

TL;DR:

AUTH_PASSWORD_VALIDATORS = [
    {"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator"},
    {"NAME": "django_pwned.validators.GitHubLikePasswordValidator"},
    {"NAME": "django_pwned.validators.MinimumUniqueCharactersPasswordValidator"},
    {"NAME": "django_pwned.validators.PwnedPasswordValidator"},
]

Validators

PwnedPasswordValidator(request_timeout=1.5)

This validator uses the Pwned Passwords API to check for compromised passwords.

Internally, this validator checks password with django's CommonPasswordValidator and if password was not in django's list, uses Pwned API to check password. So you can remove CommonPasswordValidator if you're using this validator.

AUTH_PASSWORD_VALIDATORS = [
    # ...
    # {"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator"},
    {"NAME": "django_pwned.validators.PwnedPasswordValidator"},
    # ...
]

You can set the API request timeout with the request_timeout parameter (in seconds).

If for any reason (connection issues, timeout, ...) the request to Pwned API fails, this validator skips checking password.

GitHubLikePasswordValidator(min_length=8, safe_length=15)

Validates whether the password is at least:

8 characters long, if it includes a number and a lowercase letter, or
15 characters long with any combination of characters

Based on Github's documentation about creating a strong password.

You may want to disable Django's NumericPasswordValidator and MinimumLengthValidator if you want to use GitHubLikePasswordValidator.

The minimum number of characters can be customized with the min_length parameter. The length at which we remove the restriction about requiring both number and lowercase letter can be customized with the safe_length parameter.

MinimumUniqueCharactersPasswordValidator(min_unique_characters=4)

Validates whether the password contains at least 4 unique characters. For example aaaaaaaaaabbbbbbccc is an invalid password, but aAbB is a valid password.

The minimum number of unique characters can be customized with the min_unique_characters parameter.

Development

Create and activate a python virtualenv.
Install development dependencies in your virtualenv: pip install -e '.[dev]'
Install pre-commit hooks: pre-commit install
Run tests with coverage: py.test --cov

License

MIT

Comments

Strip commas from the counts returned by the pwnedpasswords API
I've been running this library for a few days on a production site, and have seen this error just once so far.

I tried with a list of dictionary words, and trying to validate 'afternoon' will fail with:

ValueError: invalid literal for int() with base 10: '2,203'

Looking at the response for https://api.pwnedpasswords.com/range/7A10F, it includes this line which causes the error:

399752FEDFA1FE7DDC7AFD2BB36615886D2:2,203
opened by ashokdelphia 2

A beginner django project and also my first Django project which involves shortening of a longer URL into a short one using a unique id.

Django-URL-Shortener A beginner django project and also my first Django project which involves shortening of a longer URL into a short one using a uni

3 Aug 8, 2021

Dockerizing Django with Postgres, Gunicorn, Nginx and Certbot. A fully Django starter project.

Dockerizing Django with Postgres, Gunicorn, Nginx and Certbot 🚀 Features A Django stater project with fully basic requirements for a production-ready

8 Jun 27, 2022

pytest-django allows you to test your Django project/applications with the pytest testing tool.

1.1k Dec 14, 2022

APIs for a Chat app. Written with Django Rest framework and Django channels.

ChatAPI APIs for a Chat app. Written with Django Rest framework and Django channels. The documentation for the http end points can be found here This

18 Sep 9, 2022

django-dashing is a customisable, modular dashboard application framework for Django to visualize interesting data about your project. Inspired in the dashboard framework Dashing

django-dashing django-dashing is a customisable, modular dashboard application framework for Django to visualize interesting data about your project.

703 Dec 22, 2022

Django-MySQL extends Django's built-in MySQL and MariaDB support their specific features not available on other databases.

Django-MySQL The dolphin-pony - proof that cute + cute = double cute. Django-MySQL extends Django's built-in MySQL and MariaDB support their specific

504 Jan 4, 2023

Django-Audiofield is a simple app that allows Audio files upload, management and conversion to different audio format (mp3, wav & ogg), which also makes it easy to play audio files into your Django application.

Django-Audiofield Description: Django Audio Management Tools Maintainer: Areski Contributors: list of contributors Django-Audiofield is a simple app t

167 Nov 10, 2022

django Filer is a file management application for django that makes handling of files and images a breeze.

1.6k Jan 6, 2023

Twitter Bootstrap for Django Form - A simple Django template tag to work with Bootstrap

557 Oct 19, 2022

Django-pwned - A collection of django password validators

Related tags

Overview

Django Pwned

Compatibility

Installation

TL;DR:

Validators

PwnedPasswordValidator(request_timeout=1.5)

GitHubLikePasswordValidator(min_length=8, safe_length=15)

MinimumUniqueCharactersPasswordValidator(min_unique_characters=4)

Development

License

You might also like...

A beginner django project and also my first Django project which involves shortening of a longer URL into a short one using a unique id.

Dockerizing Django with Postgres, Gunicorn, Nginx and Certbot. A fully Django starter project.

pytest-django allows you to test your Django project/applications with the pytest testing tool.

APIs for a Chat app. Written with Django Rest framework and Django channels.

django-dashing is a customisable, modular dashboard application framework for Django to visualize interesting data about your project. Inspired in the dashboard framework Dashing

Django-MySQL extends Django's built-in MySQL and MariaDB support their specific features not available on other databases.

Django-Audiofield is a simple app that allows Audio files upload, management and conversion to different audio format (mp3, wav & ogg), which also makes it easy to play audio files into your Django application.

django Filer is a file management application for django that makes handling of files and images a breeze.

Twitter Bootstrap for Django Form - A simple Django template tag to work with Bootstrap

Comments

Strip commas from the counts returned by the pwnedpasswords API

Releases(v1.1.2)

v1.1.2(Jul 14, 2022)

v1.1.1(Jan 22, 2022)

v1.1.0(Jan 19, 2022)

Owner

Quera

Alt1-compatible widget host for RuneScape 3

Notes-Django: an advanced project to save notes in Django. where users are able to Create, Read, Update and Delete their notes.

Use webpack to generate your static bundles without django's staticfiles or opaque wrappers.

Django Audit is a simple Django app that tracks and logs requests to your application.

A CTF leaderboard for the submission of flags during a CTF challenge. Built using Django.

Simple XML-RPC and JSON-RPC server for modern Django

Use Database URLs in your Django Application.

Opinionated boilerplate for starting a Django project together with React front-end library and TailwindCSS CSS framework.

GeoDjango provides geospatial extensions to the Django web dev framework

Dynamic Django settings.

An example of Django project with basic user functionality and account activation.

A Django web application to receive, virus check and validate transfers of digital archival records, and allow archivists to appraise and accession those records.

A Django/Python web app that functions as a digital diary

Atualizando o projeto APIs REST Django REST 2.0

An automatic django's update checker and MS teams notifier

Strict separation of config from code.

A Django web application that shortens long URLs. This is a demo project to show off my tech abilities.

A standalone package to scrape financial data from listed Vietnamese companies via Vietstock

This is django-import-export module that exports data into many formats

Pipeline is an asset packaging library for Django.