mirror of
https://github.com/yogeshojha/rengine.git
synced 2026-10-21 07:41:28 +02:00
Yogesh Ojha
4792f70305
- Added models for WHOIS responses including WhoisDomainResponse, WhoisIPResponse, and WhoisASNResponse. - Created a parser for WHOIS data to convert raw responses into structured models. - Developed an RDAPProvider class to handle RDAP lookups using the whoisit library. - Implemented a WhoisService class for performing WHOIS lookups with optional database caching. - Added methods for finding correlations between WHOIS records based on registrant, registrar, network, country, and nameservers. - Updated Dockerfile to include tools directory and added rengine-tools dependency in pyproject.toml.
118 lines
3.2 KiB
Python
118 lines
3.2 KiB
Python
import re
|
|
|
|
from zxcvbn import zxcvbn
|
|
|
|
from app.config import settings
|
|
|
|
# Password policy
|
|
MIN_PASSWORD_SCORE = 3
|
|
MIN_PASSWORD_LENGTH = 10
|
|
|
|
|
|
# Username policy
|
|
MIN_USERNAME_LENGTH = 4
|
|
MAX_USERNAME_LENGTH = 50
|
|
|
|
# Hex color pattern
|
|
HEX_COLOR_LENGTH = 7 # e.g., #RRGGBB
|
|
|
|
|
|
def validate_password_strength(
|
|
password: str,
|
|
user_inputs: list[str] | None = None,
|
|
) -> str:
|
|
"""
|
|
Validate password strength using zxcvbn.
|
|
|
|
Args:
|
|
password: The password to validate
|
|
user_inputs: Optional list of user-specific inputs (email, username) to check against
|
|
|
|
Returns:
|
|
The validated password
|
|
|
|
Raises:
|
|
ValueError: If password doesn't meet requirements
|
|
"""
|
|
# Skip validation in DEBUG mode
|
|
if settings.DEBUG:
|
|
return password
|
|
|
|
if len(password) < MIN_PASSWORD_LENGTH:
|
|
return_error = (
|
|
f"Password must be at least {MIN_PASSWORD_LENGTH} characters long"
|
|
)
|
|
raise ValueError(return_error)
|
|
|
|
result = zxcvbn(password, user_inputs=user_inputs or [])
|
|
|
|
if result["score"] < MIN_PASSWORD_SCORE:
|
|
return_error = (
|
|
"Password is too weak. Consider using a stronger password with a "
|
|
"mix of uppercase, lowercase, numbers, and special characters."
|
|
)
|
|
raise ValueError(return_error)
|
|
|
|
if result["guesses_log10"] < MIN_PASSWORD_SCORE:
|
|
return_error = "Password is too guessable. Choose a less common password."
|
|
raise ValueError(return_error)
|
|
|
|
return password
|
|
|
|
|
|
def validate_username(username: str) -> str:
|
|
"""
|
|
Validate username format and length.
|
|
|
|
Args:
|
|
username: The username to validate
|
|
|
|
Returns:
|
|
The validated username
|
|
|
|
Raises:
|
|
ValueError: If username doesn't meet requirements
|
|
"""
|
|
if len(username) < MIN_USERNAME_LENGTH:
|
|
return_error = (
|
|
f"Username must be at least {MIN_USERNAME_LENGTH} characters long"
|
|
)
|
|
raise ValueError(return_error)
|
|
|
|
if len(username) > MAX_USERNAME_LENGTH:
|
|
return_error = f"Username must be at most {MAX_USERNAME_LENGTH} characters long"
|
|
raise ValueError(return_error)
|
|
|
|
# change the conditions if needed for organization specific but not recommended
|
|
# COndition: Must start with a letter
|
|
if not re.match(r"^[a-zA-Z]", username):
|
|
return_error = "Username must start with a letter"
|
|
raise ValueError(return_error)
|
|
|
|
# Condition: Can only contain letters, numbers, underscores, and dots
|
|
if not re.match(r"^[a-zA-Z][a-zA-Z0-9_.]*$", username):
|
|
return_error = (
|
|
"Username can only contain letters, numbers, underscores, and dots"
|
|
)
|
|
raise ValueError(return_error)
|
|
|
|
return username
|
|
|
|
|
|
def validate_hex_color(color: str) -> str:
|
|
"""
|
|
Validate hex color format (#RRGGBB).
|
|
"""
|
|
color = color.strip()
|
|
if not color.startswith("#"):
|
|
msg = "Color must start with #"
|
|
raise ValueError(msg)
|
|
if len(color) != HEX_COLOR_LENGTH:
|
|
msg = f"Color must be in format #RRGGBB ({HEX_COLOR_LENGTH} characters)"
|
|
raise ValueError(msg)
|
|
hex_pattern = r"^#[0-9A-Fa-f]{6}$"
|
|
if not re.match(hex_pattern, color):
|
|
msg = "Color must contain valid hexadecimal characters (0-9, A-F)"
|
|
raise ValueError(msg)
|
|
return color.upper()
|