Packages

pwned_coretheory

0.0.7
1.5.3 1.5.2 1.5.1 1.5.0 1.2.4 1.2.3 1.2.2 1.2.1 1.2.0 1.0.2 1.0.1 1.0.0 0.0.7

A simple application to check if an email or password has been pwned using the HaveIBeenPwned? API. It requires a purchased hibp-api-key in order to use the email checking functions.

HexDocs

Current section

Files

Jump to
Readme
13 Versions
1 Dependency
Dependants
Files
Activity
pwned_coretheory lib utils api_client.ex
Raw

lib/utils/api_client.ex 

defmodule Pwned.Utils.APIClient do

  @moduledoc false



  @hibp_api_key System.get_env("HIBP_API_KEY")

  @user_agent Application.get_env(:ct_pwned, :user_agent) || "Pwned Elixir Client"



  def get(head) do

    case HTTPoison.get("https://haveibeenpwned.com/api/v3/breachedaccount/#{head}?truncateResponse=false", [{"hibp-api-key", @hibp_api_key}, {"user-agent", @user_agent}]) do

      {:ok, %HTTPoison.Response{body: body, headers: _headers, request: _request, status_code: 200}} ->

        {:pwned_email, body}



      {:ok, %HTTPoison.Response{body: _, headers: _headers, request: _request, status_code: 404}} ->

        {:safe_email, "email not pwned"}



      {:ok, %HTTPoison.Response{body: _, headers: _headers, request: _request, status_code: 400}} ->

        {:error, "bad request"}



      {:ok, %HTTPoison.Response{body: _, headers: _headers, request: _request, status_code: 401}} ->

        {:error, "unauthorized api key"}



      {:ok, %HTTPoison.Response{body: _, headers: _headers, request: _request, status_code: 403}} ->

        {:error, "forbidden user agent"}



      {:ok, %HTTPoison.Response{body: _, headers: _headers, request: _request, status_code: 429}} ->

        {:error, "too many requests"}



      {:ok, %HTTPoison.Response{body: _, headers: _headers, request: _request, status_code: 503}} ->

        {:error, "service unavailable"}



      {:error, %HTTPoison.Error{id: nil, reason: :timeout}} ->

        {:error, "request_timeout"}



      _ ->

        :error

    end

  end

end